Comprehensive DNS Security and DNSSEC

Comprehensive DNS Security and DNSSEC

Welcome to the Comprehensive DNS Security and  course.

In this course you will learn the foundations of Domain Name System protocol, how it works and its different components.: DNS functions, DNS history, DNS structure and architecture and DNS security.

You will see a zone file and a reverse zone file structure.

You will see the most common attacks against DNS systems and how to secure your infrastructure.

You will understand BIND DNS configuration for recursive server as well as authoritative server.

You will understand real techniques to , Distributed Denial-of-Service (DDoS), spoof the source IPs and gather more information:

- fingerprint DNS

- Distributed Denial-of-Service (DDoS)

- Spoofing the Source IP

- DNS Amplification

- Cache poisoning

- Domain hijacking

You will learn to use different command line tools and utilities, such as whois, dig, hping3, fpdns, etc.

You will learn to read DNS packet information, like the header, the answer section and the additional information section.

You will understand security and filtering on incoming requests using Response Policy Zones, and tracking down bad domains.

You will discover DNSSEC, the framework that is being adopted to sign and secure DNS communications. TSIG is also covered in this course.

This course will be kept updated with relevant material both asked by the students and initiated by the instructor. Feel free to suggest topics you’d like to understand more.

For more information don’t hesitate to ask in the Q&A section, I’ll be happy to help.

Please leave feedback.

I wish you a happy learning experience.

Best Regards,

Taoufik Znibae

Securing BIND. Understanding and securing DNS with best practices, DNSSEC, RPZ, ACLs, etc.

Url: View Details

What you will learn

• Domain Name System (DNS) Security
• DNS security mechanisms: DNSSEC, RPZ, ACL, Chroot
• DNSSEC DNS Security Extensions

Rating: 4

Level: All Levels

Duration: 1.5 hours

Instructor: Taoufik Z.