Comprehensive DNS Security Attacks and Defenses

Comprehensive DNS Security Attacks and Defenses | Udemy
English | Size: 418.25 MB
Genre: eLearning

What you’ll learn
Domain Name System (DNS) Security
DNS security mechanisms: RPZ, ACL, Chroot
DNSSEC standard
Attacks: DDoS, amplification and cache poisoning.
Information security at corporate level applied to DNS

Welcome to the Comprehensive DNS Security course.

In this course you will learn the foundations of Domain Name System protocol, how it works and its different components.

– DNS functions

– DNS history

– DNS structure and architecture

– DNS security

You will see a zone file and a reverse zone file structure.

You will see the most common attacks against DNS systems and how to secure your infrastructure.

You will understand BIND DNS configuration for recursive server as well as authoritative server.

You will conduct real techniques to fingerprint DNS, launch Distributed Denial-of-Service (DDoS), spoof the source IPs and gather more information:

– Understand DNS Amplification attacks

– Cache poisoning

– Domain hijacking

You will learn to use different command line tools and utilities, such as whois, dig, hping3, fpdns, etc.

You will learn to read DNS packet information, like the header, the answer section and the additional information.

You will understand security and filtering on incoming requests using Response Policy Zones, and tracking down bad domains.

You will discover DNSSEC, the framework that is being adopted to sign and secure DNS communications.

This course will be kept updated with relevant material both asked by the students and initiated by the instructor. Feel free to suggest topics you’d like to understand more.

For more information don’t hesitate to ask in the Q&A section, I’ll be happy to help.

Please leave feedback and thank you.

Who this course is for:
IT Security Engineers
Network Engineers
Server Administrators
Information Security Specialists
Webmasters
Security Manager