Hardware/Network
DNS Monitoring: Connecting the Dots for Better Internet Security | SecurityWeek.Com
Reported by securityweek.com
In my previous column I wrote about how profit-driven attackers are hijacking legitimate online resources to launch campaigns. One way in which they do this is by using the Domain Name Service (DNS) to connect to sites that are known bad or suspicious and incorporate them into their campaigns. They use DNS in one of three ways: to gain command and control, to exfiltrate data, or to redirect traffic. Since few companies monitor DNS for security purposes, DNS has become an ideal avenue for attackers.