DNS Opens Networks To Data Attacks

KingFishKingFish
edited August 2004 in Science & Tech
The same technology that allows Web surfers to locate and connect to computers on the Internet can be used to create covert communications channels, bypass security measures and store distributed content, a security researcher said Saturday.
The security hack essentially uses data transferred by domain name service (DNS) servers to hide additional information in the network communications. DNS servers act as the white pages of the Internet, invisibly transforming easy-to-remember domain names--such as www.cnet.com--into the numerical network addresses used by computers. Moreover, corporate security measures, such as firewalls, tend to ignore DNS data because they assume it's harmless, said Dan Kaminsky, a security researcher for telecommunications firm Avaya and a speaker at the Defcon hacking conference here. "DNS is everywhere--you cannot communicate over the global Internet without knowing where to go," he said. "No one notices DNS; no one monitors it."
Whoa. -KF

Source: ZDNet

Comments

  • EMTEMT Seattle, WA Icrontian
    edited August 2004
    That's neat. Great post.
Sign In or Register to comment.