[unisog] DNS Cache Poisoning

Michael Holstein michael.holstein at csuohio.edu
Thu Apr 7 14:47:52 GMT 2005


> Are there any good descriptions out there of what these attempts look
> like? 

Yes. SANS has a good paper on it :

http://isc.sans.org/presentations/dnspoisoning.php


and here are some SNORT sigs to help you identify when it happens :

http://isc.sans.org/diary.php?date=2005-04-01

Cheers,

Michael Holstein CISSP GCIA
Cleveland State University


More information about the unisog mailing list