Securing Web Access—DNS Threats and Remedies

Sehgal, Anchal; Dixit, Abhishek

doi:10.1007/978-981-13-2285-3_40

Cited by 3 publications

(4 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…IoT devices provide a vast landscape for rebinding DNS attacks by getting access to the individual networks because of the security mechanisms used [44]. Using social engineering to lure the prey via the website through the small ads for visiting it [45].…”

Section: ) Zero-day Vulnerabilitymentioning

confidence: 99%

See 1 more Smart Citation

A Comprehensive Review of DNS-based Distributed Reflection Denial of Service (DRDoS) Attacks: State-of-the-Art

Nuiaa¹,

Manickam²,

ALsaeedi³

2022

Int. J. Adv. Sci. Eng. Inf. Technol.

View full text Add to dashboard Cite

Cyberattacks significantly impact the services based on the internet that is used in our daily lives. Any disruption will make it extremely difficult for us to carry out our daily activities. Cyberattacks will disrupt online services, exploit vulnerabilities to breach databases and servers, and so on. Various systems and services contribute to the Internet's seamless functionality. The Domain Name System (DNS) is one of the most important services. DNS is used to resolve domain names into machine-readable IP addresses. DNS, like many other Internet services, is vulnerable to cyber-attacks. While DNS faces a slew of threats, one in particular appears to stand out. DNS is vulnerable to a variety of distributed denial-of-service attacks. The distributed reflection denial of service (DRDoS) attack, a flooding attack against DNS servers that renders them unavailable, disrupting domain name resolution activities, is one of the most common variants. DRDoS attacks have been on the rise in recent years. DNS lookup outages would significantly impact our online activities in the world of ultra-connectivity because they are typically the first step in establishing a connection with a server. The purpose of this paper is to present a state-of-the-art review of DRDoS attack detection and mitigation algorithms as well as the datasets on which these algorithms operate. Finally, we discussed each of these algorithms' relative merits and demerits.

show abstract

Section: ) Zero-day Vulnerabilitymentioning

confidence: 99%

“…After that, the victim communicates with the attacker tool via queries of DNS [33]. DNS tunnelling can be employed for many purposes, such as carrying data for the packets of DNS [45]. The attacker exploits DNS tunnelling to exfiltrate data from the enterprises hacked into [56].…”

Section: Protocol Abuse Attacksmentioning

confidence: 99%

A Comprehensive Review of DNS-based Distributed Reflection Denial of Service (DRDoS) Attacks: State-of-the-Art

Nuiaa¹,

Manickam²,

ALsaeedi³

2022

Int. J. Adv. Sci. Eng. Inf. Technol.

View full text Add to dashboard Cite

show abstract

“…DNS spoofing attacks are classified according to the attacker's ultimate objective. DNS spoofing may be accomplished in a variety of methods, including the following [3]:…”

Section: Introductionmentioning

confidence: 99%

Hybrid Detection and Mitigation of DNS Protocol MITM attack based on Firefly algorithm with Elliptical Curve Cryptography

Padmavathi

2023

EAI Endorsed Trans Perv Health Tech

View full text Add to dashboard Cite

A Domain Name Server is a critical Internet component. It enables users to surf the web and send emails. DNS is a database used by millions of computers to determine which address best answers a user’s query. DNS is an unencrypted protocol that may be exploited in numerous ways. The most popular DNS MITM attack uses DNS poisoning to intercept communications and fake them. DNS servers do not verify the IP addresses they forward traffic to. In DNS attacks, the attacker either targets the domain name servers or attempts to exploit system weaknesses. The Proposed FFOBLA-ECC model detects the DNS Spoofed nodes in a wireless network using the optimized firefly boosted LSTM with the help of TTL and RTR parameters received from the simulation environment and provides authentication between the nodes in order to mitigate it using the Elliptical curve cryptography. The proposed model results are different from the other methods and yield highly accurate results beyond 98% compared with the existing RF, ARF, and KNN methods.

show abstract

“…DNS spoofing attacks are classified according to the attacker's ultimate objective. DNS spoofing may be accomplished in a variety of methods, including the following [3]: The following table 1 summarizes the literature on the various kinds of DNS MITM attack detection methods.…”

Section: Introductionmentioning

confidence: 99%

Hybrid Detection and Mitigation of DNS Protocol MITM attack based on Firefly algorithm with Elliptical Curve Cryptography

Padmavathi

2022

EAI Endorsed Trans Perv Health Tech

View full text Add to dashboard Cite

A Domain Name Server is a critical Internet component. It enables users to surf the web and send emails. DNS is a database used by millions ofcomputers to determine which address best answers a user’s query. DNS is an unencrypted protocol that may be exploited in numerous ways. The mostpopular DNS MITM attack uses DNS poisoning to intercept communications and fake them. DNS servers do not verify the IP addresses they forwardtraffic to. In DNS attacks, the attacker either targets the domain name servers or attempts to exploit system weaknesses. The Proposed FFOBLA-ECC model detects the DNS Spoofed nodes in a wireless network using the optimized firefly boosted LSTM with the help of TTL and RTR parametersreceived from the simulation environment and provides authentication between the nodes in order to mitigate it using the Elliptical curve cryptography. The proposed model results are different from the other methods and yield highly accurate results beyond 98% compared with the existing RF, ARF, and KNN methods.

show abstract

Securing Web Access—DNS Threats and Remedies

Cited by 3 publications

References 3 publications

A Comprehensive Review of DNS-based Distributed Reflection Denial of Service (DRDoS) Attacks: State-of-the-Art

A Comprehensive Review of DNS-based Distributed Reflection Denial of Service (DRDoS) Attacks: State-of-the-Art

Hybrid Detection and Mitigation of DNS Protocol MITM attack based on Firefly algorithm with Elliptical Curve Cryptography

Hybrid Detection and Mitigation of DNS Protocol MITM attack based on Firefly algorithm with Elliptical Curve Cryptography

Contact Info

Product

Resources

About