| 名称 |
DNS Blocking |
|
| 攻击可能性 |
典型严重性 |
| High |
Very High |
|
| 摘要 |
An adversary intercepts traffic and intentionally drops DNS requests based on content in the request. In this way, the adversary can deny the availability of specific services or content to the user even if the IP address is changed. |
| 前置条件 |
This attack requires the ability to conduct deep packet inspection with an In-Path device that can drop the targeted traffic and/or connection. |
| 解决方案 | Hard Coded Alternate DNS server in applications Avoid dependence on DNS Include "hosts file"/IP address in the application. Ensure best practices with respect to communications channel protections. Use a .onion domain with Tor support |
| 关联弱点 |
|
CWE 编号
|
描述
|
| CWE-300 |
Channel Accessible by Non-Endpoint |
|
| 关联 CAPEC |
|
CAPEC 编号
|
描述
|
| CAPEC-603 |
An adversary blocks the delivery of an important system resource causing the system to fail or stop working. |
|