Security Portal: Foiling DNS Attacks

"Most of us take DNS servers for granted. Here, in a continuing series on attacking and defending your own machines, I discuss how people attack DNS servers and what you can do to better your security. I answer these questions:

"I'll discuss this in attack/defense manner, the same way I did in Anyone With a Screwdriver Can Break In! The "defense" will be implemented on a BIND 8 DNS server, but the concepts apply to all DNS servers. This article should be useful to managers and admins alike, though the former will find the attacks and general concepts more interesting than the technical specifics of defense. So, here we go...."

Complete Story

Related Stories:

• NetworkWorldFusion: DNS security upgrade promises a safer 'Net(Oct 19, 2000)
• Security Portal: Why We Don't Need Perfectly Secure Systems(Oct 04, 2000)
• Security Portal: Hardening the BIND DNS Server(Oct 02, 2000)
• Security Portal: DNS Security - closing the b(l)inds(Sep 29, 1999)