What does DNS cache poisoning mean?

# I believe many people will know DNS is the source of our trust, and DNS is also very important. We must ensure that our DNS is not attacked. So what does DNS cache poisoning mean? Let’s explain it below.

1: What does DNS cache poisoning mean?

dns cache poisoning can also be called nds spoofing. DNS cache poisoning is Taking advantage of the vulnerability in DNS, the IP address to be queried is set to the IP address to be attacked, so the user can only see the attacker's page, which is a kind of deception to the user. [Recommended reading:

What is DNS]

2: Principle of DNS cache poisoning

Nowadays, the dns servers on the Internet are set up using bind. However, a big problem with bind is that BIND will cache and cache all query results. In this way, we can pretend to be a server. If we put the query The IP of the attacker is changed to the IP of the attack. In fact, DNS spoofing does not directly hack the other party's website, but impersonates the website and conducts a kind of fraud.

3: The main form of DNS cache poisoning

1. Modify the hosts file. The hosts file is an important information file in the computer and can map the host name to IP, so as to realize the function of dns. The location of the hosts file is not the same in different systems, but it can be modified.

2.dns is hijacked

Dns hijacking is when the hijacked network intercepts the domain name resolution request, analyzes the domain name, and requests release outside the scope of review, so that the network cannot be accessed or is Fake URL.

The above is a complete introduction to what DNS cache poisoning means. If you want to know more about operation and maintenance knowledge, please pay attention to the PHP Chinese website.

#

The above is the detailed content of What does DNS cache poisoning mean?. For more information, please follow other related articles on the PHP Chinese website!