CAPEC-589
DNS Blocking
2017-01-12
00h00 +00:00
00h00 +00:00
Peringatan untuk CAPEC tertentu
Tetap terinformasi tentang perubahan untuk CAPEC tertentu.
Deskripsi CAPEC
An adversary intercepts traffic and intentionally drops DNS requests based on content in the request. In this way, the adversary can deny the availability of specific services or content to the user even if the IP address is changed.
Informasi CAPEC
Prasyarat
This attack requires the ability to conduct deep packet inspection with an In-Path device that can drop the targeted traffic and/or connection.Mitigasi
Hard Coded Alternate DNS server in applicationsAvoid dependence on DNS
Include "hosts file"/IP address in the application.
Ensure best practices with respect to communications channel protections.
Use a .onion domain with Tor support
Kelemahan Terkait
| Nama Kelemahan | |
|---|---|
CWE-300 |
Channel Accessible by Non-Endpoint The product does not adequately verify the identity of actors at both ends of a communication channel, or does not adequately ensure the integrity of the channel, in a way that allows the channel to be accessed or influenced by an actor that is not an endpoint. |
Referensi
REF-473
Censorship in the Wild: Analyzing Internet Filtering in Syriahttp://conferences2.sigcomm.org/imc/2014/papers/p285.pdf
Pengajuan
| Nama | Organisasi | Tanggal | Tanggal rilis |
|---|---|---|---|
| Seamus Tuohy |
Modifikasi
| Nama | Organisasi | Tanggal | Komentar |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Related_Attack_Patterns, Related_Weaknesses | |
| CAPEC Content Team | The MITRE Corporation | Updated Mitigations |
