Review Paper on DNS Tunnelling

Abstract

Our internet is made possible by the DNS system; misuse or error can cause it to go down for several days, weeks, or even for a whole region. Similar accidents have in the past caused global disruptions. Tunnelling or command execution was not the intended intent of DNS. Several tools have been developed over time to enable tunnelling, which employs DNS tunnels to allow the transfer of arbitrary data across the DNS infrastructure. DNS security has not gotten as much attention lately because it was not intended for widespread data transport. Consequently, DNS intrusions increasingly pose serious security risks to companies. This paper will review the principles behind the working of DNS tunnelling and some of the utilities that can be used to support it and I will also discuss ways of preventing such attacks using payload analysis and traffic analysis techniques.