DNS CACHE POISONING DETERMINATION DEVICE, DNS CACHE POISONING DETERMINATION METHOD, AND DNS CACHE POISONING DETERMINATION PROGRAM

摘要

PROBLEM TO BE SOLVED: To detect DNS cache poisoning with regard to IP address information in an unspecified number of DNS cache servers.;SOLUTION: A DNS cache poisoning determination server 100 comprises: a communication unit 120 that receives information indicating combination of a domain name and an IP address included in a response from a DNS cache server that received an inquiry about the IP address for the domain name; a cache poisoning information database 140 that has recorded combination of a domain name and an IP address that were answered erroneously in the past; and a determination unit 130 that compares the domain name in the information with recorded contents of the cache poisoning information database 140, and determines the information is cache poisoned if both agree.;COPYRIGHT: (C)2015,JPO&INPIT