Recovering and Protecting against DNS Cache Poisoning Attacks

DNSSEC can provide a strong countermeasure to DNS Cache Poisoning Attacks, however, DNSSEC can't be actually deployed in a short time, it is still impossible to avoid poisoning attacks thoroughly, a majority of DNS servers are still hreatened from the poisoning attacks. This attack is used in conjunction with web spoofing, it can change Web URL, lead economic losing and privacy leaking. In this paper, we emphasize on the recovery and protection after suffered DNS Cache Poisoning Attacks. We expect to decrease success ratio of poisoning attacks greatly through restoration, source port randomization (SPR) and setting time-to-live (TTL). After above deployments, attackers have to extend attack time to make attack successful, and this will provide sufficient time to defend and preserve. The strategy of this paper greatly increases resistance of DNS server against DNS poisoning, and also can be a transition before DNSSEC is deployed thoroughly.