Design security schemes to prevent DNS cache poisoning attacks

Abstract

Domain Name System (DNS) is a critical part of today’s Internet infrastructure. Its main function is to map domain names into IP addresses for most of the network applications. However, DNS server is insecure and vulnerable to various attacks. DNS cache poisoning attack is a frequently discovered vulnerability that changes or inserts records in the resolver caches so that a DNS query will return a fake IP address of the attacker’s server instead of the real IP address. By that way, DNS cache poisoning attacks may cause large losses in the network transition. In this project, the student will investigate various existing solutions and develop his own efficeint solution to overcome the DNS cache poisoning attacks.