1. DNS/攻撃
| /GhostDNS /JPCERT /amp攻撃 /管理組織攻撃 |
DNSは分散管理されていることもあり、攻撃/対象もいろいろある。-- ToshinoriMaeno 2020-09-25 23:29:25
The Most Popular Types of DNS Attacks SecurityTrails Blog · Nov 22 2018 https://securitytrails.com/blog/most-popular-types-dns-attacks
https://www.networkworld.com/article/3409719/worst-dns-attacks-and-how-to-mitigate-them.html
Worst DNS attacks and how to mitigate them DNS threats including DNS hijacking, tunneling, phishing, cache poisoning and DDoS attacks are all on the rise. By Michael Cooney Network World | July 18, 2019 12:00 PM PT
Sea Turtle DNS hijacking campaign
DNSpionage attack upgrades its tools
DNS security warnings grow
https://www.ncsc.gov.uk/news/ongoing-dns-hijacking-and-mitigation-advice
Obtaining SSL certificates.
Transparent proxying.
Get on the DNSSEC bandwagon
Traditional DNS threats
Experts say DNS cache poisoning, or DNS spoofing, is also still quite common.
DNS tunneling, which uses DNS to present a hidden communication channel that can then bypass a firewall, is another attack threat.
DNS attack mitigation https://www.networkworld.com/article/3409719/worst-dns-attacks-and-how-to-mitigate-them.html?page=2
IDC 2019 Global DNS Threat Report https://www.efficientip.com/resources/idc-dns-threat-report-2019/
DNS in the cloud: Why and why not https://www.networkworld.com/article/3273891/dns-in-the-cloud-why-and-why-not.html
- Advantages of Cloud DNS
How to protect your infrastructure from DNS cache poisoning https://www.networkworld.com/article/3298160/how-to-protect-your-infrastructure-from-dns-cache-poisoning.html
- One solution: DNSSEC (これは違う)
- What is DNS cache poisoning?
Prevent DNS cache poisoning attacks
There are several measures organization should take to prevent DNS cache poisoning attacks.
- End user education is also very important in preventing these attacks.