CAPEC Definitions

    CAPEC Definitions / CAPEC-589

    CAPEC-589: DNS Blocking

    An adversary intercepts traffic and intentionally drops DNS requests based on content in the request. In this way, the adversary can deny the availability of specific services or content to the user even if the IP address is changed.

    Severity:
    Possibility:

    Extended Description

    No Extended Description.

    Mitigations

    Hard Coded Alternate DNS server in applications

    Avoid dependence on DNS

    Include hosts file/IP address in the application.

    Ensure best practices with respect to communications channel protections.

    Use a .onion domain with Tor support

    Relationships with other CAPECs

    CAPEC-603: Blockage

    Details

    Prerequisites

    This attack requires the ability to conduct deep packet inspection with an In-Path device that can drop the targeted traffic and/or connection.

    Related Weaknesses

    CWE-300: Channel Accessible by Non-Endpoint

    Details