DNS Security Management by Dooley, Michael -- Read -- Imperial Library of Trantor

Index

Cover Title page Copyright Acknowledgments Preface 1 Introduction

Why Attack DNS? DNS Basic Operation Security Context and Overview What's Next

2 Introduction to the Domain Name System (DNS)

DNS Overview – Domains and Resolution Name Resolution Zones and Domains Resolver Configuration Summary Notes

3 DNS Protocol and Messages

DNS Message Format The DNS Resolution Process Revisited Summary Notes

4 DNS Vulnerabilities

Introduction DNS Data Security DNS Information Trust Model DNS Infrastructure Risks and Attacks Broader Attacks that Leverage DNS Summary

5 DNS Trust Sectors

Introduction Cybersecurity Framework Items DNS Trust Sectors External DNS Trust Sector Extranet DNS Trust Sector Recursive DNS Trust Sector Internal Authoritative DNS Servers Additional DNS Deployment Variants Other Deployment Considerations Putting It All Together Notes

6 Security Foundation

Introduction Hardware/Asset Related Framework Items DNS Server Hardware Controls Summary

7 Service Denial Attacks

Introduction Detecting Service Denial Attacks Denial of Service Protection Summary

8 Cache Poisoning Defenses

Introduction Attack Forms Cache Poisoning Detection Cache Poisoning Defense Mechanisms Notes

9 Securing Authoritative DNS Data

Introduction Attack Forms Attack Detection Defense Mechanisms Summary

10 Attacker Exploitation of DNS

Introduction Detecting Nefarious use of DNS Mitigation of Illicit DNS Use

11 Malware and Apts

Introduction Malware Proliferation Techniques Malware Use of DNS Detecting Malware Mitigating Malware Using DNS Summary

12 DNS Security Strategy

Major DNS Threats and Mitigation Approaches Common Controls DNS Role-Specific Defenses Broader Security Strategy

13 DNS Applications to Improve Network Security

Safer Web Browsing Email Security Securing Automated Information Exchanges Storing Security-Related Information Summary Notes

14 DNS Security Evolution Appendix A: Cybersecurity Framework Core DNS Example Appendix B: DNS Resource Record Types Bibliography Index IEEE Press Series on Networks and Services Management ELUA