DNS Enhancement with DNSSEC and DoT for Enhanced Online Security

DNS cache poisoning, also known as DNS spoofing, remains a significant cybersecurity threat, allowing attackers to manipulate DNS caches to redirect users to malicious websites. This paper delves into the mechanisms of DNS cache poisoning, highlighting vulnerabilities in the DNS infrastructure and exploring various attack vectors utilized by malicious actors. We present a comprehensive survey of existing literature on DNS cache poisoning attacks and mitigation strategies, identifying gaps and opportunities for further research. Moreover, we propose a solution leveraging DNS Security Extensions (DNSSEC) and DNS over TLS (DoT) to enhance DNS security, particularly focusing on implementing these measures within the OpenWrt router firmware. Through our implementation, we demonstrate how DNSSEC and DoT can fortify DNS resolvers against cache poisoning attacks, thus bolstering overall Internet security.