Winning tactics with DNS tunnelling. Issue 12 (December 2019)

• Record Type: Journal Article
• Authors: Al-kasassbeh, Mouhammd; Khairallah, Tariq
• Is Part Of: Network security. Volume 2019:Issue 12(2019)
• Page Start: 12
• Page End: 19
• Publication Date: 2019-12
• Subjects: Computer security -- Periodicals; Computer networks -- Security measures -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; Computers -- Access control -- Periodicals; 005.805
• DOI: 10.1016/S1353-4858(19)30144-8
• Languages: English
• ISSNs: 1353-4858

Abstract

Abstract : The Domain Name System (DNS) protocol is the backbone of the Internet. It facilitates connection to websites and services using understandable names that are easy to remember. DNS converts these names to their corresponding IP addresses in order to establish the communication through the network. The security of the DNS protocol was not originally a major concern for organisations since the protocol was not intended to be used for regular data transmission. 1 However, in recent years, attackers have developed tools that have taken advantage of this situation and utilised DNS for malicious purposes, such as covert tunnelling and data exfiltration.