Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Skip to main content

Securing Web Access—DNS Threats and Remedies

  • Conference paper
  • First Online:
Emerging Trends in Expert Applications and Security

Part of the book series: Advances in Intelligent Systems and Computing ((AISC,volume 841))

  • 1372 Accesses

Abstract

The Domain Name System (DNS) is a distributed approach of mapping the domain name attributes with their respective IP addresses. The DNS has inadvertently been an attack target since its inception. The attack vectors have subsequently given rise to the amendments in protocols and various other techniques that defer or mitigate the risk factors of the same. In this paper, an analytical review of the vulnerabilities and threats of the DNS and its various security implications has been discussed. DNS Security Extension (DNSSEC), a public key cryptographic approach proposed by the Internet Engineering Task Force (IETF) to protect the integrity of the DNS records, has further been presented. Further, in this paper, the DNSSEC architecture, usage, and operational security flaws which subsequently might compromise the integrity of the DNS are also presented.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Subscribe and save

Springer+ Basic
$34.99 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 129.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 169.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Similar content being viewed by others

References

  1. Kovaes E (2015) Google Vietnam targeted in DNS hijacking attack. Retrieved from www.securityweek.cim/google-vietnam-targeted-dns-hijacking-attack

  2. Russon M-A (2015) Google Vietnam domain name briefly hacked and hijacked by Lizrd Squad. Retrieved from www.ibtimes.co.uk/google-vietnam-domain-name-briefly-hacked-hijacked-by-lizard-squad-1489293

  3. Mealling M, Daniel R (2000) The naming authority pointer (NAPTR) DNS Resource Record. RFC-2915

    Google Scholar 

  4. Arends R, Austein R, Larson M, Massey D, Rose S (2005) Resource records for the DNS security extensions. RFC-4034

    Google Scholar 

  5. Mockapetris P (2004) Domain names implementation and specification. RFC-1035

    Google Scholar 

  6. Ariyapperuma S, Mitchell CJ (2007) Security vulnerabilities in DNS and DNSSEC. In: ARES- the second international conference on availability, reliability and security, IEEE Computer Society

    Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Abhishek Dixit .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2019 Springer Nature Singapore Pte Ltd.

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Sehgal, A., Dixit, A. (2019). Securing Web Access—DNS Threats and Remedies. In: Rathore, V., Worring, M., Mishra, D., Joshi, A., Maheshwari, S. (eds) Emerging Trends in Expert Applications and Security. Advances in Intelligent Systems and Computing, vol 841. Springer, Singapore. https://doi.org/10.1007/978-981-13-2285-3_40

Download citation

Publish with us

Policies and ethics