Attack and Defense of Webmail Based on DNS Cache Poisoning

doi:10.3969/j.issn.1000-3428.2009.04.044

Computer Engineering ›› 2009, Vol. 35 ›› Issue (4): 125-127.

• Security Technology • Previous Articles Next Articles

Attack and Defense of Webmail Based on DNS Cache Poisoning

ZHANG Hong-qing, WANG Dao-shun

(Department of Computer Science and Technology, Tsinghua University, Beijing 100084)

Received:1900-01-01 Revised:1900-01-01 Online:2009-02-20 Published:2009-02-20

基于DNS缓存中毒的Webmail攻击及防护

张红轻，王道顺

(清华大学计算机科学与技术系，北京 100084)

Abstract

Abstract: According to the characteristics of Webmail, this paper proposes a new attack method based on DNS Cache Poisoning, and presents an attacking framework. Experimental results show that it can attack Live Mail successfully, so it can testify the potential risk of DNS Cache Poisoning. Three methods are given to defense the attack.

Key words: DNS, Cache Poisoning, Webmail, attack

摘要： 针对Webmail的特性，提出一种基于域名系统(DNS)缓存中毒(Cache Poisoning)的Web邮箱(Webmail)攻击技术，并对整个攻击流程进行描述，实现了对当前安全性较高的Live Mail的成功攻击，验证DNS Cache Poisoning潜在的危害性，提出相应的安全防护手段。

关键词: 域名系统, 缓存中毒, Web邮箱, 攻击

CLC Number:

TP393.08

ZHANG Hong-qing; WANG Dao-shun. Attack and Defense of Webmail Based on DNS Cache Poisoning[J]. Computer Engineering, 2009, 35(4): 125-127.

张红轻;王道顺. 基于DNS缓存中毒的Webmail攻击及防护[J]. 计算机工程, 2009, 35(4): 125-127.

/ Recommend / Download Citations

URL:

https://www.ecice06.com/EN/Y2009/V35/I4/125

[1]	YANG Linfeng, HUANG Zheng, XU Yan, DING Zhijun. Modeling and Detection of Blockchain Smart Contract Attackers Based on Petri Nets [J]. Computer Engineering, 2025, 51(4): 15-26.
[2]	WU Ruolan, CHEN Yuling, DOU Hui, ZHANG Yangwen, LONG Zhong. Privacy Preserving Algorithm Using Federated Learning Against Attacks [J]. Computer Engineering, 2025, 51(2): 179-187.
[3]	CHEN Xianyi, DING Sizhe, WANG Kang, YAN Leiming, FU Zhangjie. An Watermarking Framework of Active Protection Model for Secure Federated Learning [J]. Computer Engineering, 2025, 51(1): 138-147.
[4]	XIAO Chaoen, LI Zifan, ZHANG Lei, WANG Jianxin, QIAN Siyuan. Differential Cryptanalysis Based on Transformer Model and Attention Mechanism [J]. Computer Engineering, 2025, 51(1): 156-163.
[5]	Yunhe CUI, Jianpeng ZHAO, Hongzhen YANG, Xianchao LI. Curve Decision Fusion-Based Saturation Attack Detection Method in SDN [J]. Computer Engineering, 2024, 50(8): 123-132.
[6]	XIONG Shiqiang, HE Daojing, WANG Zhendong, DU Runmeng. Review of Federated Learning and Its Security and Privacy Protection [J]. Computer Engineering, 2024, 50(5): 1-15.
[7]	LIANG Songlin, LIN Wei, WANG Jue, YANG Qing. Research on Network Malicious Traffic Detection for Post-Exploitation Attack Behavior [J]. Computer Engineering, 2024, 50(5): 128-138.
[8]	Shuaiwei LIU, Zhi LI, Guomei WANG, Li ZHANG. Adversarial Example Generation Algorithm Based on Transformer and GAN [J]. Computer Engineering, 2024, 50(2): 180-187.
[9]	Qian LI, Haiyun XIANG, Yuting ZHANG, Yun GAN, Haode LIAO. G-MASK Facial Adversarial Attack Combining Gaussian Filtering and MASK [J]. Computer Engineering, 2024, 50(2): 308-316.
[10]	YUAN Pingyu, QIU Lin. Web Attacks Detection Method Based on BERT with Multi-Model Fusion [J]. Computer Engineering, 2024, 50(11): 197-206.
[11]	GUO Lei, JING Shan, WEI Liang, ZHAO Chuan. Crossfire Attack Defense Method Based on Software Defined Network [J]. Computer Engineering, 2024, 50(10): 216-227.
[12]	ZHANG Xuejun, XI Ayou, JIA Xiaohong, ZHANG Bin, LI Mei, DU Xiaogang, HUANG Haiyan. Study on Adversarial Sample Attacks on Deep Learning Based Fingerprinting Indoor Localization [J]. Computer Engineering, 2024, 50(10): 228-239.
[13]	Xueli NI, Zhuo MA, Qun WANG. Overview of Blockchain Mining Pool Networks and Typical Attack Modes [J]. Computer Engineering, 2024, 50(1): 17-29.
[14]	Benwei HE, Yunfei GUO, Hao LIANG, Qingfeng WANG. Binary Code-Oriented Fine-Grained Software Diversification Method [J]. Computer Engineering, 2024, 50(1): 138-144.
[15]	Xiuyu SHEN, Weifeng JI, Yingqi LI, Xuan WU. TCA1C DDoS Detection Model for Edge Computing [J]. Computer Engineering, 2024, 50(1): 198-205.

Please choose a citation manager

Content to export

Attack and Defense of Webmail Based on DNS Cache Poisoning

基于DNS缓存中毒的Webmail攻击及防护

PDF

Knowledge

Cited

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

Comments

模态框（Modal）标题

Please choose a citation manager

Content to export

Attack and Defense of Webmail Based on DNS Cache Poisoning

基于DNS缓存中毒的Webmail攻击及防护

PDF

Knowledge

Cited

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

Comments