Don't have an account? Sign up
If you're already signed up, please sign in
Cache Poisoning — a DNS attack that causes a caching resolver to store forged records and serve them as answers until they expire or are removed.
The attack exploits trust in DNS, caching behavior, or the size difference between queries and responses. Mitigation requires a combination of DNSSEC validation, restricted recursion, source-address filtering, rate controls, and resilient infrastructure.
Cache Poisoning — a DNS attack that causes a caching resolver to store forged records and serve them as answers until they expire or are removed.
An attacker attempts to forge a DNS answer, place false data in a cache, or use DNS servers to amplify traffic toward a victim. The exact technique depends on the attack type.
Disable open recursion, keep DNS software updated, use DNSSEC validation where applicable, limit abusive queries and responses, deploy source-address filtering, and monitor anomalous traffic.
