Research and Implementation of DNS-White-List Tool Based on C#.NET

摘要

This paper provides a viable solution to tackle Kanminsky's DNS cache poisoning attack. By analyzing DNS's resolution methods and the principle of the cache poisoning attack, the concept of cache file and hosts file is introduced in this paper. The purpose of using hosts file is to reduce the impact of DNS cache poisoning attack. By using a DNS-white-list tool based on C#.NET, the mapping of domain names and IP addresses can be added or modified in hosts file. Comparing with the existing solutions, randomize port ID and DDSSEC, this paper starts from the cache file. The DNS-white-list tool can reduce harm of DNS cache poisoning attack effectively and protect the client.