North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Cache Poisoning Detection via ONZRA's CacheAudit

  • From: Jose Avila
  • Date: Fri Aug 01 16:20:55 2008

In light of new attack vectors DNS Cache Poisoning discovered by Dan Kaminsky, ONZRA has developed a free Open Source (BSD License) tool called CacheAudit. This tool allows recursive providers to detect cache poisoning events using cache dumps from their DNS servers. Along with releasing this tool, ONZRA has also released a white paper describing the validation process.

Main Tool Page: http://www.onzra.com/cacheaudit.html
White Paper: http://www.onzra.com/RecursiveDNSCacheAuditingWhitepaper.pdf


Jose


--
Jose Avila III
ONZRA
www.onzra.com