{"id":16540,"date":"2018-07-12T11:16:22","date_gmt":"2018-07-12T16:16:22","guid":{"rendered":"https:\/\/www.dotcom-tools.com\/blog\/?p=16540"},"modified":"2021-11-17T02:07:28","modified_gmt":"2021-11-17T08:07:28","slug":"most-common-dns-security-issues","status":"publish","type":"post","link":"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/","title":{"rendered":"Most Common DNS Security Issues"},"content":{"rendered":"<p>[vc_row][vc_column][vc_column_text]<img loading=\"lazy\" class=\"aligncenter size-full wp-image-16541\" src=\"https:\/\/www.dotcom-tools.com\/web-performance\/wp-content\/uploads\/2018\/07\/Most-Common-DNS-Security-Issues.jpg\" alt=\"Common DNS Security Issues\" width=\"900\" height=\"400\" srcset=\"https:\/\/www.dotcom-tools.com\/web-performance\/wp-content\/uploads\/2018\/07\/Most-Common-DNS-Security-Issues.jpg 900w, https:\/\/www.dotcom-tools.com\/web-performance\/wp-content\/uploads\/2018\/07\/Most-Common-DNS-Security-Issues-350x156.jpg 350w, https:\/\/www.dotcom-tools.com\/web-performance\/wp-content\/uploads\/2018\/07\/Most-Common-DNS-Security-Issues-768x341.jpg 768w\" sizes=\"(max-width: 900px) 100vw, 900px\" \/>Understanding the security weaknesses of every component within your digital infrastructure is paramount for true protection. While you may find yourself focusing more on the actual website and server security, one of the biggest threats to the health and performance of your digital platform is also the least discussed.<\/p>\n<p>DNS, which stands for Domain Name System, is an essential communication protocol created to simplify accessing websites while supporting the dramatic expansion of our digital world. It\u2019s common to assume this protocol only determines communication between computers and networks, but<a href=\"https:\/\/www.dotcom-tools.com\/web-performance\/blog\/dns-guide-for-beginners\/\" target=\"_blank\" rel=\"noopener\"> it\u2019s capable of much more<\/a>.<\/p>\n<p>However, its capabilities are another topic. Right now, we\u2019re discussing the very real DNS security issues. Of course, there are unique circumstances, but in general, the majority of <a href=\"https:\/\/www.dotcom-tools.com\/web-performance\/blog\/dns-security\/\" target=\"_blank\" rel=\"noopener\">security-related<\/a> issues involve one of the following scenarios.<\/p>\n<h2>DNS Amplification &amp; Reflection<\/h2>\n<p>This is hacking method forms the foundation for almost every other DNS security issues specific to hacking attempts. Essentially, this method of attack leverages open resolvers. This accomplishes two specific tasks:<\/p>\n<ul>\n<li>Hides the source of the attack, which makes it harder to determine who is actually responsible<\/li>\n<li>Dynamically enhances the volume of the attack<\/li>\n<\/ul>\n<p>Generally, a DNS Amplification &amp; Reflection attack results in the dreaded DDoS, or Distributed Denial of Service, attack. The reason why this method works is because open resolvers respond to literally any source that submits an inquiry.<\/p>\n<p>Cyber criminals send malicious requests through open resolvers under the disguise of the IP address the attack is focused on. Therefore, the resolvers process the request as if its was from the authorized address. This action results in DNS responses sent directly to the target.<\/p>\n<h2>Resource Utilization<\/h2>\n<p>A resource utilization attack also uses DNS open resolvers. However, this attack slightly varies from the previous DNS security issues. Rather than spoof an address to gain access for other attacks, this security threat leverages open resolvers to steal, or consume, device resources.<\/p>\n<p>For example, when executed this attack consumes CPU and memory resources, which hinders the resources available within the open resolver. Oftentimes, the only way to treat this level of attack is by stopping and restarting DNS service.<\/p>\n<h2>DNS Cache Poisoning<\/h2>\n<p>One of the most common types of DNS cyberattacks is known as DNS Cache Poisoning. In a similar way as your web server and browser, DNS servers leverage the power of cacheing to streamline network connectivity and domain responses. While this component is essential, it\u2019s also vulnerable to malicious attacks.<\/p>\n<p>Most commonly, hackers transmit falsified or spoofed data directly to the open resolver. AS the resolver receives and reads the fake data, known as RR information, it automatically gets stored in the DNS server cache for the TTL, or Time To Live, lifespan. So, what does this attack cause? In a way, a giant headache for website owners.<\/p>\n<p>When successful, DNS cache poisoning can make your current domain completely inaccessible by visitors. When end-users enter your domain in their URL search field, or click on a link to your site, the poisoned cache directs visitors to a different domain. The redirected domain is typically a malicious phishing site filled with viruses and other harmful elements capable of infecting all who visit its pages.[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column][vc_cta h2=&#8221;Free Online DNS Trace Test&#8221; h4=&#8221;Check DNS propagation from two dozen different root locations&#8221; add_button=&#8221;right&#8221; btn_title=&#8221;Test Now&#8221; btn_color=&#8221;green&#8221; btn_link=&#8221;url:https%3A%2F%2Fwww.dotcom-tools.com%2FDNS-lookup-tools.aspx||target:%20_blank|&#8221; css=&#8221;.vc_custom_1530908711776{background-color: #ecda79 !important;}&#8221;][\/vc_cta][\/vc_column][\/vc_row]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[vc_row][vc_column][vc_column_text]Understanding the security weaknesses of every component within your digital infrastructure is paramount for true protection. While you may find yourself focusing more on the actual website and server security, one of the biggest threats to the health and performance of your digital platform is also the least discussed. DNS, which stands for Domain Name&hellip;<\/p>\n","protected":false},"author":5,"featured_media":16541,"comment_status":"open","ping_status":"open","sticky":false,"template":"template-url.php","format":"standard","meta":[],"categories":[40],"tags":[78,69,85,47,81,71],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v17.6 (Yoast SEO v19.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\r\n<title>Most Common DNS Security Issues | Dotcom-Monitor Tools Blog<\/title>\r\n<meta name=\"description\" content=\"The majority of DNS security issues involve one of the following 3 scenarios. Let&#039;s look into them and how to better secure your website.\" \/>\r\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\r\n<link rel=\"canonical\" href=\"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/\" \/>\r\n<meta property=\"og:locale\" content=\"en_US\" \/>\r\n<meta property=\"og:type\" content=\"article\" \/>\r\n<meta property=\"og:title\" content=\"Most Common DNS Security Issues\" \/>\r\n<meta property=\"og:description\" content=\"The majority of DNS security issues involve one of the following 3 scenarios. Let&#039;s look into them and how to better secure your website.\" \/>\r\n<meta property=\"og:url\" content=\"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/\" \/>\r\n<meta property=\"og:site_name\" content=\"Dotcom-Monitor Tools Blog\" \/>\r\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/dotcommonitor\" \/>\r\n<meta property=\"article:published_time\" content=\"2018-07-12T16:16:22+00:00\" \/>\r\n<meta property=\"article:modified_time\" content=\"2021-11-17T08:07:28+00:00\" \/>\r\n<meta property=\"og:image\" content=\"https:\/\/www.dotcom-tools.com\/web-performance\/wp-content\/uploads\/2018\/07\/Most-Common-DNS-Security-Issues.jpg\" \/>\r\n\t<meta property=\"og:image:width\" content=\"900\" \/>\r\n\t<meta property=\"og:image:height\" content=\"400\" \/>\r\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\r\n<meta name=\"twitter:card\" content=\"summary\" \/>\r\n<meta name=\"twitter:creator\" content=\"@dotcom_monitor\" \/>\r\n<meta name=\"twitter:site\" content=\"@dotcom_monitor\" \/>\r\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Glenn Lee\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\r\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.dotcom-tools.com\/web-performance\/#website\",\"url\":\"https:\/\/www.dotcom-tools.com\/web-performance\/\",\"name\":\"Dotcom-Monitor Tools Blog\",\"description\":\"Let&#039;s Make the Web a Faster Place.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.dotcom-tools.com\/web-performance\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/#primaryimage\",\"url\":\"https:\/\/www.dotcom-tools.com\/web-performance\/wp-content\/uploads\/2018\/07\/Most-Common-DNS-Security-Issues.jpg\",\"contentUrl\":\"https:\/\/www.dotcom-tools.com\/web-performance\/wp-content\/uploads\/2018\/07\/Most-Common-DNS-Security-Issues.jpg\",\"width\":900,\"height\":400,\"caption\":\"Common DNS Security Issues\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/#webpage\",\"url\":\"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/\",\"name\":\"Most Common DNS Security Issues | Dotcom-Monitor Tools Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.dotcom-tools.com\/web-performance\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/#primaryimage\"},\"datePublished\":\"2018-07-12T16:16:22+00:00\",\"dateModified\":\"2021-11-17T08:07:28+00:00\",\"author\":{\"@id\":\"https:\/\/www.dotcom-tools.com\/web-performance\/#\/schema\/person\/a18124e28e1b2c8e71f8ddf7d3e38ed4\"},\"description\":\"The majority of DNS security issues involve one of the following 3 scenarios. Let's look into them and how to better secure your website.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.dotcom-tools.com\/web-performance\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Most Common DNS Security Issues\"}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.dotcom-tools.com\/web-performance\/#\/schema\/person\/a18124e28e1b2c8e71f8ddf7d3e38ed4\",\"name\":\"Glenn Lee\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.dotcom-tools.com\/web-performance\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/7a52a01e153d000504984c4f0853f002?s=96&d=retro&r=pg\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/7a52a01e153d000504984c4f0853f002?s=96&d=retro&r=pg\",\"caption\":\"Glenn Lee\"},\"description\":\"Glenn Lee is the chief product engineer for Dotcom-Monitor\u2019s LoadView load testing platform. Glenn is an industry expert on load\/stress testing and has appeared on numerous tech publications across the web. When Glenn\u2019s not testing the limits of websites, he enjoys cooking, flying airplanes, and racing motorcycles.\",\"url\":\"https:\/\/www.dotcom-tools.com\/web-performance\/author\/glenn-lee\/\"}]}<\/script>\r\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Most Common DNS Security Issues | Dotcom-Monitor Tools Blog","description":"The majority of DNS security issues involve one of the following 3 scenarios. Let's look into them and how to better secure your website.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/","og_locale":"en_US","og_type":"article","og_title":"Most Common DNS Security Issues","og_description":"The majority of DNS security issues involve one of the following 3 scenarios. Let's look into them and how to better secure your website.","og_url":"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/","og_site_name":"Dotcom-Monitor Tools Blog","article_publisher":"https:\/\/www.facebook.com\/dotcommonitor","article_published_time":"2018-07-12T16:16:22+00:00","article_modified_time":"2021-11-17T08:07:28+00:00","og_image":[{"width":900,"height":400,"url":"https:\/\/www.dotcom-tools.com\/web-performance\/wp-content\/uploads\/2018\/07\/Most-Common-DNS-Security-Issues.jpg","type":"image\/jpeg"}],"twitter_card":"summary","twitter_creator":"@dotcom_monitor","twitter_site":"@dotcom_monitor","twitter_misc":{"Written by":"Glenn Lee","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/www.dotcom-tools.com\/web-performance\/#website","url":"https:\/\/www.dotcom-tools.com\/web-performance\/","name":"Dotcom-Monitor Tools Blog","description":"Let&#039;s Make the Web a Faster Place.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dotcom-tools.com\/web-performance\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/#primaryimage","url":"https:\/\/www.dotcom-tools.com\/web-performance\/wp-content\/uploads\/2018\/07\/Most-Common-DNS-Security-Issues.jpg","contentUrl":"https:\/\/www.dotcom-tools.com\/web-performance\/wp-content\/uploads\/2018\/07\/Most-Common-DNS-Security-Issues.jpg","width":900,"height":400,"caption":"Common DNS Security Issues"},{"@type":"WebPage","@id":"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/#webpage","url":"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/","name":"Most Common DNS Security Issues | Dotcom-Monitor Tools Blog","isPartOf":{"@id":"https:\/\/www.dotcom-tools.com\/web-performance\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/#primaryimage"},"datePublished":"2018-07-12T16:16:22+00:00","dateModified":"2021-11-17T08:07:28+00:00","author":{"@id":"https:\/\/www.dotcom-tools.com\/web-performance\/#\/schema\/person\/a18124e28e1b2c8e71f8ddf7d3e38ed4"},"description":"The majority of DNS security issues involve one of the following 3 scenarios. Let's look into them and how to better secure your website.","breadcrumb":{"@id":"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.dotcom-tools.com\/web-performance\/most-common-dns-security-issues\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.dotcom-tools.com\/web-performance\/"},{"@type":"ListItem","position":2,"name":"Most Common DNS Security Issues"}]},{"@type":"Person","@id":"https:\/\/www.dotcom-tools.com\/web-performance\/#\/schema\/person\/a18124e28e1b2c8e71f8ddf7d3e38ed4","name":"Glenn Lee","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dotcom-tools.com\/web-performance\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/7a52a01e153d000504984c4f0853f002?s=96&d=retro&r=pg","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7a52a01e153d000504984c4f0853f002?s=96&d=retro&r=pg","caption":"Glenn Lee"},"description":"Glenn Lee is the chief product engineer for Dotcom-Monitor\u2019s LoadView load testing platform. Glenn is an industry expert on load\/stress testing and has appeared on numerous tech publications across the web. When Glenn\u2019s not testing the limits of websites, he enjoys cooking, flying airplanes, and racing motorcycles.","url":"https:\/\/www.dotcom-tools.com\/web-performance\/author\/glenn-lee\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dotcom-tools.com\/web-performance\/wp-json\/wp\/v2\/posts\/16540"}],"collection":[{"href":"https:\/\/www.dotcom-tools.com\/web-performance\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dotcom-tools.com\/web-performance\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dotcom-tools.com\/web-performance\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dotcom-tools.com\/web-performance\/wp-json\/wp\/v2\/comments?post=16540"}],"version-history":[{"count":4,"href":"https:\/\/www.dotcom-tools.com\/web-performance\/wp-json\/wp\/v2\/posts\/16540\/revisions"}],"predecessor-version":[{"id":17751,"href":"https:\/\/www.dotcom-tools.com\/web-performance\/wp-json\/wp\/v2\/posts\/16540\/revisions\/17751"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dotcom-tools.com\/web-performance\/wp-json\/wp\/v2\/media\/16541"}],"wp:attachment":[{"href":"https:\/\/www.dotcom-tools.com\/web-performance\/wp-json\/wp\/v2\/media?parent=16540"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dotcom-tools.com\/web-performance\/wp-json\/wp\/v2\/categories?post=16540"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dotcom-tools.com\/web-performance\/wp-json\/wp\/v2\/tags?post=16540"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}