Defend against a DNS spoof by using techniques such as setting to protect your DNS servers and resolvers, use DNS security extensions, and use two-factor authentication when using a domain name registrar. Â
- [Instructor] DNS is an important protocol.…We know that there are attacks against DNS,…so we should take steps to defend against DNS attacks.…Defend your servers.…First line of defense is keep…your systems patched and updated.…Disable any unnecessary services on the machine.…Enable cache locking.…Cache locking is a feature on Windows server…that allows administrators to control whether…or not the DNS cache can be overwritten.…
Now on the network, DNS servers publish DNS data,…and DNS caches, or non-authoritative…servers retrieve DNS data.…To defend both of them, your cache servers…should have a separate IP address from the DNS server.…If you use a domain name registrar, there are some things…you can do to ensure more rigid control.…Use two-factor authentication.…That way if the password is compromised,…there's still another authentication factor such as…a one-time password being delivered to the mobile phone.…
Implement some type of a verification,…such as a security word that is used…before any changes are made to the DNS setting,…
Author
Lisa Bock
Updated
1/13/2020Released
9/29/2016Note: The topics in this course will prepare you for key objectives on the Certified Ethical Hacker exam. Find an overview of the certification and the exam handbook at https://www.eccouncil.org/programs/certified-ethical-hacker-ceh/.
- Sniffing network traffic
- Passive vs. active attacks
- Comparing IPv4 to IPv6
- MAC and macof attacks
- Investigating DHCP attacks
- Detecting ARP and DNS spoofing
- Sniffing tools and techniques
Skill Level Beginner
Duration
Views
-
Introduction
-
Welcome1m 5s
-
-
1. Sniffing Overview
-
Sniffing network traffic4m 15s
-
The OSI model4m 10s
-
Passive and active attacks4m 34s
-
Tapping into the data stream3m 19s
-
Comparing IPv4 to IPv64m 35s
-
-
2. MAC Attacks
-
macof attack demo1m 51s
-
Spoofing a MAC address2m 47s
-
-
3. DHCP
-
Investigating DHCP4m 20s
-
Depleting the DHCP pool1m 25s
-
-
4. ARP
-
Address Resolution Protocol2m 48s
-
Ettercap for ARP poison3m 8s
-
Detecting ARP spoofing2m 51s
-
-
5. DNS
-
Domain Name Systems3m 28s
-
Caching and forgery2m 12s
-
Poisoning DNS1m 56s
-
-
6. Sniffing Tools and Techniques
-
Capturing images1m 19s
-
Investigating OmniPeek3m 13s
-
Other sniffing tools1m 9s
-
Defending against sniffing1m 53s
-
-
Conclusion
-
Next steps2m
-
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.
Share this video
Embed this video
Video: Defending against DNS spoofing