DNS Security

DNS Security: Defending the Domain Name System provides tactics on how to protect a Domain Name System (DNS) framework by exploring common DNS vulnerabilities, studying different attack vectors, and providing necessary information for securing DNS infrastructure. The book is a timely reference as DNS is an integral part of the Internet that is involved in almost every attack against a network. The book focuses entirely on the security aspects of DNS, covering common attacks against DNS servers and the protocol itself, as well as ways to use DNS to turn the tables on the attackers and stop an incident before it even starts.

• Presents a multi-platform approach, covering Linux and Windows DNS security tips
• Demonstrates how to implement DNS Security tools, including numerous screen shots and configuration examples
• Provides a timely reference on DNS security, an integral part of the Internet
• Includes information of interest to those working in DNS: Securing Microsoft DNS and BIND servers, understanding buffer overflows and cache poisoning, DDoS Attacks, pen-testing DNS infrastructure, DNS firewalls, Response Policy Zones, and DNS Outsourcing, amongst other topics

Autorentext

Allan Liska is a Consulting Systems Engineer at FireEye Inc. and an "accidental" security expert. While Allan has always been good at breaking things, he got his start professionally working as a customer service representative at GEnie Online Services (a long defunct early competitor to AOL), where he would spend his off hours figuring out how users had gain unauthorized access to the system, booting them off, and letting the developers know what needed to be patched. Unknowingly, this was leading him down the path of becoming a security professional. Since then he has work at companies like UUNET, Symantec, and iSIGHT Partners helping companies better secure their networks. He has also worked at Boeing trying to break into those company networks. In addition to his time spent on both sides of the security divide Allan has written extensively on security including The Practice of Network Security and Building an Intelligence-Led Security Program. He was also a contributing author to Apache Administrator's Handbook.

Inhalt

Ch. 1: Understanding DNS

Ch. 2: Issues in DNS Security

Ch. 3: DNS Configuration Errors

Ch. 4: External DNS Exploits

Ch. 5: DNS Network Security

Ch. 6: Secure Zone File Management

Ch. 7: BIND Security

Ch. 8: Windows DNS Security

Ch. 9: Outsourcing DNS

Ch. 10: DNSSEC

Ch. 11: Anycast