Relevance and protection regarding dns attacks, Computer Networking

Assignment Help:

Relevance and Protection regarding DNS Attacks

While discussing about the relevance and protection of the database, there are many things which need to consider. Almost, may of the issues be able to be addressed with the new updated version or can say the new release of bind.  But according to menandmice.com, the threat is still real:

“A lot of other alarming surveys are available on this website “

Another suitable solution can be the DNS SEC, which is a proposition for secure DNS transactions. Although, this approach generally solves almost all the protocol problems. But because of backward compatibility reason, sometimes, this is not implemented and hence the other alternatives are needed to be discovered by the current network administrator. In order to save or can say to secure the group of servers or simple the DNS; there are many alternatives which can be opted.

Following are measures can be taken in order to escape form the above stated problems of can say the issues

  • In order to prevent spoofing, recursive queries need to be controlled and hence should be forbidden.
  • Maximum updating of that BIND is good hence this process hold be incremented as many as possible.
  • Managing  all the servers in the single and same subnet not only increase the effort for hard management but it also results in the single point failure problem, which need to be overcome by dividing the server in to different subnets. This happens same in the case of routers as well as leased lines.
  • Restrict the possible queries and the possible hosts who are allowed to query to the minimum.

 

While discussing about the processing of the DNS, there is one specific service which is used to synchronize with the primary server is the request (AXFR).  In real since, this services can be hacked in order to get the required information regarding zone transfer and hence all the data of the current DNS can be accessed. This will allow the hacked to gather or can say collect all the associated information regarding the victim’s network. In order to protect this kind of hacking, the good way is to put this feature off in order to restrict it to specific host.

There is another best alternative which can be adopted in order to protect the DNs is the mechanism of Divide and conquer strategy used in the DNS architecture.  The main principal of this strategy is generally contains two major process. The initial one divides or can say diverges the Domain name System (DNS system in order to result in to two parts, out of which the one perform the function of mapping which will be from name to address and the other that is the second part will perform the process for the requesting the incoming which are generally from the internal or can say from the host which are trusted. This is the reason, in the case of external Domain Name System, if the hacked process is applied to external DNS, to the internal hosts,the service provider won’tbe affected at least.


Related Discussions:- Relevance and protection regarding dns attacks

Hub - network layer and routing , Hub A hub  is a  small box that  con...

Hub A hub  is a  small box that  connects  individual devices on network  so that  these devices  can  communicate  with each  other. Hub  is an inexpensive device. It is comm

Comparing transport for tcp/ip and osi model, Q. Comparing Transport for TC...

Q. Comparing Transport for TCP/IP and osi model? - The features of TCP and UDP defined at TCP/IP Transport Layer correspond to many of the requirements of the OSI Transport Lay

Topologies, discuss communication isolation and privatization in network to...

discuss communication isolation and privatization in network topologies

Define the term - store-and-forward and cut-through switch, Store-and-forwa...

Store-and-forward switch  The layer 2 switch accepts a frame on an input line, buffers it briefly, and then routes it to the appropriate output line. Cut-through switch

Sap is used by the cisco ios for which encapsulation types, "SAP" is used b...

"SAP" is used by the Cisco IOS for which encapsulation types? Ans) Three types:- Ethernet_802.2 Token-Ring FDDI_802.2

UDP Programming, I have a larget text file of 1MB, how do i break down into...

I have a larget text file of 1MB, how do i break down into chunks of packets to send over UDP? byte b[]=new byte[1024]; FileInputStream f=new FileInputStream("input.txt

Explain repeaters, Repeaters - Operate only in physical layer - Conn...

Repeaters - Operate only in physical layer - Connects two segments of the same LAN - Both segments must be of the same protocol - Only forwards frames; does not filter

What is wdm, What is WDM? WDM is conceptually the similar as FDM, excep...

What is WDM? WDM is conceptually the similar as FDM, except that the multiplexing and demultiplexing includes light signals transmitted by fiber optics channel.

What is silly window syndrome, What is silly window syndrome? It is a d...

What is silly window syndrome? It is a difficulty that can ruin TCP performance. This problem happens when data are passed to the sending TCP entity in large blocks, but an int

Write Your Message!

Captcha
Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd