diff --git a/README.md b/README.md index 8498cba..c623b44 100644 --- a/README.md +++ b/README.md @@ -5386,6 +5386,14 @@ You can test by using a stored procedure, so the application must be sanitize th
What is DNS Spoofing? How to prevent it?
+ +DNS spoofing occurs when a particular DNS server’s records of “spoofed” or altered maliciously to redirect traffic to the attacker. This redirection of traffic allows the attacker to spread malware, steal data, etc. + +**Prevention** +- Use encrypted data transfer protocols - Using end-to-end encryption vian SSL/TLS will help decrease the chance that a website / its visitors are compromised by DNS spoofing. +- Use DNSSEC - DNSSEC, or Domain Name System Security Extensions, uses digitally signed DNS records to help determine data authenticity. +- Implement DNS spoofing detection mechanisms - it’s important to implement DNS spoofing detection software. Products such as XArp help product against ARP cache poisoning by inspecting the data that comes through before transmitting it. +