cache poisoning
An attack that slips false answers into a resolver The DNS server that looks up domain names on behalf of users. Full definition of resolver's memory, so users asking for a real domain are sent to a wrong address. Dan Kaminsky showed in 2008 how practical it was. Random source ports made it much harder, and DNSSEC Domain Name System Security Extensions Digital signatures that prove DNS answers are genuine and unchanged. Full definition of DNSSEC lets resolvers detect forged answers.
- category
- Security and abuse