Explain the DNS security threats.

Common DNS security threats are :

Distributed Denial of Service (DDoS):

• What happens: Attackers control many computers to flood a victim’s system with too much traffic.
• Result: The victim’s system can’t handle the load, crashes, and becomes unavailable.

DNS Spoofing (or DNS Cache Poisoning):

• What happens: Attackers redirect traffic from real DNS servers to fake servers.
• Result: Users may be directed to malicious sites, risking the theft or corruption of personal data.

Fast Flux:

• What happens: Attackers constantly change location-based data to hide the source of the attack.
• Result: The attacker’s real location is masked, giving them time to exploit the system. Flux can change the web server address or both the web server address and DNS server names.

Reflected Attacks:

• What happens: Attackers send queries with a fake source address, redirecting responses to the victim.
• Result: Thousands of redirected responses overwhelm the victim’s system.

Reflective Amplification DoS:

• What happens: Attackers trigger a flux by making the response larger than the query.
• Result: Similar to reflected attacks, but the larger responses further overwhelm the victim’s system.