Threat trees - DNS poisoning - luring attack from Doyle, Bill on 2007-10-09 (public-wsc-wg@w3.org from October 2007)

From: Doyle, Bill <wdoyle@mitre.org>
Date: Tue, 9 Oct 2007 10:28:09 -0400
To: <public-wsc-wg@w3.org>
Message-ID: <518C60F36D5DBC489E91563736BA4B5801B2D56E@IMCSRV5.MITRE.ORG>

In the threat trees DNS poisoning "compromised DNS" is listed under
luring attacks.

It is my thinking that an obscured DNS listing falls into a luring
attack. With DNS poisoning a user may not have a clue. User types in an
address or bookmark that they have used before and user agent goes to a
malware infected site.

Regards
Bill D.

Received on Tuesday, 9 October 2007 14:28:28 UTC