Securing Infoblox DNSSEC Implementations with Thales Luna SA - Solution Brief

The Domain Name System (DNS) is the Internet’s standard naming service, and is responsible for mapping domain names to IP addresses. Virtually all Internet applications rely on DNS. As the Internet has gained popularity, attacks on the DNS servers have become common. One category of these attacks, known as DNS spoofing or cache poisoning, seeks to divert users to malicious websites by corrupting a DNS name server’s cache database. While most types of attacks against DNS can be dealt with by patching the name server software, some of these “cache poisoning” attacks are caused by inherent flaws in DNS. The only way to address these flaws is to introduce a layer of security on top of the DNS protocol.