Abstract

The internet infrastructure functionally utilizes the Domain Name System (DNS), which translates domain names into IP addresses to create successful online connections. The basic infrastructure of the DNS system exposes security risks because weak protection measures allow attackers to perform DNS spoofing, cache poisoning, DDoS attacks, hijacking, tunneling, and advanced persistent threat attacks to steal data. This paper examines mitigation methods and techniques such as DNSSEC, DoH threat intelligence automation, and secure resolvers like Quad9 and Cloudflare, and their implementation for DNS security through an analysis of key DNS elements, detailing usual attack methods and the extensive risks of DNS breaches that manifest as noncompliance issues and operational breakdowns.