For DNS query, it is natural to expect that the local DNS server may not know how to resolve an address. In this case, further queries will be made by this local DNS server. If a hacker can find "a way" to make a certain DNS server report back the wrong IP address, then anyone trying to get to one Web address will be sent to a bogus one, without any obvious way for the user to detect that anything is wrong. Likewise, email could be delivered to the wrong destination. 1) Describe two possible attacks to make the resolver report the wrong IP address.

For DNS query, it is natural to expect that the local DNS server may not know how to resolve an address. In this case, further queries will be made by this local DNS server. If a hacker can find "a way" to make a certain DNS server report back the wrong IP address, then anyone trying to get to one Web address will be sent to a bogus one, without any obvious way for the user to detect that anything is wrong. Likewise, email could be delivered to the wrong destination. 1) Describe two possible attacks to make the resolver report the wrong IP address.

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

DNS poisoning attacks need to use spoofed source IP addresses for the forged DNS responses sent to the victim recursive DNS server. True False
It may be difficult for application proxies to interpret end-to-end encryption due of its complexity. A solution that allows a secure protocol to establish a connection with an application-level proxy may be advantageous.
In order to launch DNS poisoning attacks, an attacker has to be able to intercept the network traffic between the victim recursive DNS server and the authoritative DNS server. True False
There is a thorough look at many different parts of DNS queries, such as iterated and non-iterated GET requests, authoritative and root server DNS records, and DNS searches in general.
A person's e-mail address is his or her login name @ the name of a DNS domain with an MX record. Login names can be first names, last names, initials, and all kinds of other names. Suppose that a large company decided too much e-mail was getting lost because people did not know the login name of the recipient. Is there a way for them to fix this problem without changing DNS? If so, give a proposal and explain how it works. If not, explain why it is impossible.
Use the test below and write conclusion for in 200 words LLMNR Poisoning and SMB Relay Attacks. The Linked Local Multicast Name Resolution (LLMNR) is a technique used to identify a system when DNS fails to do so on local network. It sends out a multicast message to all systems listening on the local network and waits for a response. This tool utilizes username and NTLMv2 hash for verification of credentials. It’s an internal attack where impersonator can intercept and act as that host then gain usernames and hashes and crack weak passwords to utilize it for their exploits. Server Message Block (SMB) is used for sharing access to files, printers, serial ports, and other resources on a network. It was mainly used for Windows, however Linux and macOS also have components for connecting to SMB resources. In SMB relay attack, attackers capture valid authentication session and then relay it thereby obtaining access. Instead of cracking the hashes, attackers can relay these hashes for…
Sort DNS records by type. Each should be defined in depth, including examples and justifications for its use. A web server and an internal mail server may share a hostname, but is this possible?
It is important to sort DNS records based on the kind of record they are. Each one must include a thorough explanation, complete with illustrations and justifications of how it should be used. There is a possibility that a web server and an internal mail server might use the same hostname; however, is this even possible?
Show how native authentication and authorization services are implemented step-by-step when a web client wants to access a web server's protected resources. Layered protocols are mostly supported by these two groups: the You may demonstrate the veracity of what you are saying by giving instances.
Show step by step how native authentication and authorization services are implemented whenever a web client attempts to access the protected resources of a web server. There are primarily two camps of people that support layered protocols: the You may be able to demonstrate that what you are saying is correct by providing instances.
Give three different techniques that an attacker can use to make a victim send DNS requests to domains chosen by the attacker.
In any study of the Domain Name System (DNS), it is important to include iterated and non-iterated queries, root servers, authoritative servers, and DNS entries.