An Intrusion Detection System for Kaminsky DNS Cache Poisoning

Domain Name System (DNS) is the largest and most actively distributed, hierarchical and scalable database system which plays an incredibly inevitable role behind the functioning of the Internet as we know it today. A DNS translates human readable and meaningful domain names such as www.iitg.ernet.in into an Internet Protocol (IP) address such as 202.141.80.6. It is used for locating a resource on the World Wide Web. Without a DNS, the Internet services as we know it, would come to a halt. In our thesis, we proposed an Intrusion Detection System(IDS) for Kaminsky cache poisoning attacks. Our system relies on the existing properties of the DNS protocol.