SAD DNS - A Clever DNS Cache Poisoning Attack

A group of researchers from UC Riverside and Tsinghua University announced a new attack against the Domain Name System (DNS) called SAD DNS (Side channel AttackeD DNS). In this video I explain this attack

0:00 Intro

1:00 What is DNS?

3:10 Original DNS Poisoning

6:30 DNS Poisoning with Fragmentation Attack

9:30 ICMP Explained

13:00 DNS Poisoning with ICMP Error Messages

 

Resources

https://blog.cloudflare.com/sad-dns-explained/

https://www.saddns.net/

https://bit.ly/3lHTn45

https://en.wikipedia.org/wiki/Internet_Control_Message_Protocol