Don't have an account? Sign up
If you're already signed up, please sign in
DNS Poisoning — the insertion of false DNS data into the resolution path so users are directed to an attacker-chosen destination.
The attack exploits trust in DNS, caching behavior, or the size difference between queries and responses. Mitigation requires a combination of DNSSEC validation, restricted recursion, source-address filtering, rate controls, and resilient infrastructure.
DNS Poisoning — the insertion of false DNS data into the resolution path so users are directed to an attacker-chosen destination.
An attacker attempts to forge a DNS answer, place false data in a cache, or use DNS servers to amplify traffic toward a victim. The exact technique depends on the attack type.
Disable open recursion, keep DNS software updated, use DNSSEC validation where applicable, limit abusive queries and responses, deploy source-address filtering, and monitor anomalous traffic.