Understanding the threats to DNS and how to secure it. (October 2015)

• Record Type: Journal Article
• Authors: Marrison, Chris
• Is Part Of: Network security. (2015:Oct.)
• Page Start: 8
• Page End: 10
• Publication Date: 2015-10
• Subjects: Computer security -- Periodicals; Computer networks -- Security measures -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; Computers -- Access control -- Periodicals; 005.805
• DOI: 10.1016/S1353-4858(15)30090-8
• Languages: English
• ISSNs: 1353-4858

Abstract

Abstract : Essentially the address book of the Internet, the Domain Name System (DNS) is a mission-critical infrastructure used by all organisations and without which they cannot function. Yet, despite its importance, it remains a vulnerable network component that is frequently used as an attack vector by cyber-criminals, and is inadequately protected by traditional security solutions. The Domain Name System (DNS) is a mission-critical infrastructure that all organisations use and can't function without. But it is a highly vulnerable network component. External DNS servers may be subject to attacks such as DNS DDoS, exploits and reconnaissance, but threats may not always be outside an organisation's firewall. Chris Marrison of Infoblox discusses the importance of securing external DNS from cyber-attacks, as well as securing internal DNS from infrastructure attacks, APTs and malware that exploit DNS, and data exfiltration via DNS.