TAILIEUCHUNG - Lecture notes on Computer and network security: Lecture 17 - Avinash Kak

Lecture 17, DNS and the DNS cache poisoning attack. After studying this chapter you will be able to understand: The domain name system, BIND, configuring BIND, running BIND on your Ubuntu laptop, light-weight nameservers (and how to install them), DNS cache poisoning attack, writing perl and python code for cache poisoning attacks. | Lecture 17: DNS and the DNS Cache Poisoning Attack Lecture Notes on “Computer and Network Security” by Avi Kak (kak@) April 12, 2016 7:46pm c 2016 Avinash Kak, Purdue University Goals: • The Domain Name System • BIND • Configuring BIND • Running BIND on your Ubuntu laptop • Light-Weight Nameservers (and how to install them) • DNS Cache Poisoning Attack • Writing Perl and Python code for cache poisoning attacks • Dan Kaminsky’s More Virulent DNS Cache Poisoning Attack CONTENTS Section Title Page Internet, Harry Potter, and the Magic of DNS 3 DNS 5 An Example That Illustrates Extensive DNS Lookups in Even the Simplest Client-Server Interactions 10 The Domain Name System and The dig Utility 25 host, nslookup, and whois Utilities for Name Lookup 39 Creating a New Zone and Zone Transfers 42 DNS Cache 45 The TTL Time Interval BIND 48 53 Configuring BIND 56 An Example of the Configuration File 61 Running BIND on Your Ubuntu Laptop 65 What Does it Mean to Run a Process in a chroot Jail? 67 Phishing versus Pharming 70 DNS Cache Poisoning 71 Writing Perl and Python Code for Mounting a DNS Cache Poisoning Attack 78 Dan Kaminsky’s More Virulent Exploit for DNS Cache Poisoning 89 Homework Problems 94 Computer and Network Security by Avi Kak Lecture 17 : INTERNET, HARRY POTTER, AND THE MAGIC OF DNS If you have read Harry Potter, you are certainly familiar with the use of owl mail by the wizards and the witches. As you would recall, in order to send a message to someone, all that a wizard or a witch had to do was to tie the message to an owl’s foot and ask the owl to deliver it to its intended recipient. That is how Harry Potter frequently got in touch with his godfather Sirius. Harry often had no idea as to the physical whereabouts of Sirius. Nonetheless, Harry’s magical owl, Hedwig, knew how to

• An ninh - Bảo mật
• Network security
• Lecture notes on Computer and network security
• Computer security
• DNS cache poisoning attack
• Configuring BIND
• Domain name system
• Web security
• security rules
• encryption techniques
• security techniques
• Security chat rooms
• especially
• Network Security Tools
• CCNA Security
• Lecture CCNA Security
• Modern Network Security Threats
• Evolution of Network Security
• Drivers for Network Security
• Network Perimeter
• Network Perimeter Security
• Network Security Principles
• Cryptography
• IDS Tools
• CGI attacks
• network intruders
• Managing Security
• Wireless
• Wireless Network Security
• attack techniques
• defensive techniques
• operating system security
• application security
• security policy
• Network Security Fundamentals
• Guide to Network Security Fundamentals
• Information security
• Define information security
• Information security careers
• Operational security
• Harden physical security
• Secure the physical environment
• Mobile device security
• Lecture Network security
• Computer network
• Computer hacking
• Internet security
• Network security model
• Securing the Network Infrastructure
• Network cable plant
• Secure removable media
• Network security hacks
• Ebook Network security hacks
• Network security technologies
• Unix host security
• Windows host security
• Wireless Security
• Advanced security
• Computer forensics
• Harden security
• Network Management Security
• Management Security
• security mechanisms
• security services
• security architecture
• encryption system
• Security principles
• Effective authentication methods
• Control access to computer systems
• Security Baselines
• Disable nonessential systems
• Harden operating systems
• Protect e mail systems
• World Wide Web vulnerabilities
• Security policy cycle
• Risk identification
• Security management
• Identity management
• Plan for change management
• CompTIA® Security+
• CompTIA Security+ certification
• Linux file manipulation tools
• Internal physical security controls
• Network hardware security modules