The State of the Art in DNS Spoo

The DNS is responsible for resolving human-readable domain names to numeric IP addresses. It is a protocol designed in the early days of the internet, and features only weak security mechanisms. The purpose of this paper is to give an overview of the threats on the current system for domain name resolution. We describe the DNS system and possible motivations for attackers. In the following we describe the di erent attacks, and discuss their success chances and possible countermeasures. We include an overview of a ected versions of di erent DNS servers, and discuss their distribution in the internet. Lastly we give a summary on the risk of DNS spoo ng.