the IP address of the same URL, it will end up being to the attacker’s website.
In a similar way, the DNS cache of any DNS server may also get poisoned. An ISP’s DNS server gets a response from other DNS servers and stores the responses in its cache. If that cache is poisoned, the same poisoned entry will spread to all home routers and from them to all computers.
Interested readers will get more information on DNS Cache Poisoning in What is DNS Cache Poisoning?
DNS Amplification Attack
If an attacker sends lots of DNS queries to DNS servers but forges the IP address of a victim’s machine as the source IP address of all the packets, lots of DNS responses will be generated by the servers, and all of them will reach the victim’s machine. Normally without any security mechanism, DNS servers cannot find out if the source IP of a DNS request is a forged one. As a result, as DNS responses are much larger in size, the responses will end up flooding the victim’s machine with responses and consume its bandwidth. And it will cause a DoS attack on the victim’s machine.
Existing DNS Security






0 Comments