The last part of DNS security scenarios — this time DNS will be used as a command and control (C2) channel. DNS has limitations, which is why using it for data transfer is quite slow and impractical. However, using it for a C2 channel is a completely different story. My lab scenario For C2 communications,… Read More »DNS tunneling vs network security controls part 5
DNS is a challenging protocol from a security perspective. We can’t simply block DNS communication due to its recursive nature. If a device needs to communicate with the internet, DNS is essential. Threat actors are well aware of this and often abuse DNS for malicious purposes in various ways. DNS can be used to exfiltrate… Read More »DNS Tunneling vs network security products part 1
Visibility, visibility and visibility. Crucial and basic thing to secure infrastructure, if you cannot see something, than you cannot protect as well. DNS protocol is quite challenging from security perspective, it’s like phone book of Internet and cannot be blocked. DNS server has to have communications with external DNS server and that is enough to… Read More »DNS over TLS/DNS over HTTPS