Security Audit

Our Web Application Pentest ( WAP) attempts to address the Owasp top 10 & SANS top 20 web application vulnerabilities and other exploitable loopholes of your web application . Along with it our WAP team also test web applications for Business logic flaws that can directly or indirectly effect the functioning of application.

Trainings

We are here to help you solve your biggest query- where and how to start? CDI has brought various courses in Ethical Hacking in Chandigarh where all you technology lovers will be given the much needed push to move forward and create a niche for yourself in the field. From Beginner to Expert level we have many kinds of training patterns.

India Nigeria Partner With Us Latest Events Articles
91-771045-0011
Call Us : +91-771045-0011
91-771045-0011

DNS sinkhole, the best weapon to protect your website from malware attack

 Posted By: Ljsingh / Jun 27, 2014 / 

[caption id="attachment_435" align="aligncenter" width="380"]DNS Sinkhole prevent against malware attack DNS Sinkhole prevent against malware attack[/caption] In today's era, where the malware attacks are increasing day by day DNS sinkhole is the best way to protect your website from it. DNS sinkholes are also known as sinkhole server, internet sinkhole or blackholeDNS.

What actually does this DNS sinkhole do?

In simple words, DNS sinkholes sends false information to the servers so as to prevent the unecessary usage of domain names. DNS stands for domain name service, which is used to access the internet. By using DNS sinkholes you can actually prevent the unwanted communications between the server and the domain name. DNS sinkholes mitigates malicious and unwanted domains. [caption id="attachment_436" align="aligncenter" width="433"]DNS sinkholes working DNS sinkholes working[/caption]

DNS sinkhole features

  • DNS sinkholes are simple and easy to use, they block the unwanted traffic that tries to reach the internet. It basically redirects the traffic that comes.
  • Adminstrative efforts are very less this means that you do not need a large number of people team. Only single person can add as many domains and hosts he want to add.
  • DNS sinkholes are open-source software which are easy to setup. In short the capital cost is reduced to very large extent.
  • Additional components can be added which provide real time notification of sinkhole events, and packet log of sinkholed host traffic.

Also SEE: Havex malware strikes industrial and SCADA system.

DNS sinkhole limitations

 

  • One of the major limitation of DNS sinkholes is that it do not actually detect or block malwares. It detects the indicators from which malwares may come. This requires additional efforts by the analysts so that further investigation can be done.
  • DNS sinkholes primarily uses the DNS services. For those malwares who use IP addresses, DNS sinkholes would not be affected.
  • Due to the fact that sinkholes block the entire top level domains, there may be a case when the non-affected malware websites also get blocked.

You might also be interested in

[caption id="attachment_332" align="alignleft" width="150"]Evernote Forum site hacked Evernote Forum site hacked[/caption] [caption id="attachment_303" align="alignleft" width="150"]Dominos website hacked Dominos website hacked[/caption]

See more of Cyber Intelligence by logging in.
Connect with cyber security experts,Discover job opportunities,Online Training, Information Security Advisory and lot more.