P.K. SHARMA

Cyber security intelligence, AI governance, practitioner analysis

Servers

Name server (DNS): what it is and how it is attacked

Translates names like example.com into network addresses.

Also known as

  • DNS
  • domain name server

Typing any of them into the editor finds this object.

Why it matters on a security diagram

Whoever controls name resolution controls where traffic actually goes, regardless of what users typed.

How it gets attacked, and what reduces it

How it gets attacked

  • Registrar or hosting records changed to redirect a domain
  • Name lookups used as a quiet channel to carry data out

What reduces it

  • Lock the registrar account with its own second factor and a registry lock
  • Monitor for lookups used as a data channel, which look like ordinary traffic in volume
  • Remove records pointing at services you no longer run

Where it sits

Group
Servers · Machines that run something for other machines.
Whose side, by default
Ours · Belongs to the organisation the diagram is about.
Catalogue identifier
dns-server

Reviewed . CC BY 4.0.

Others in servers

The servers group lists all 13 of them side by side.

Name server on your own diagram

Open the editor, press N, and type DNS. The object is placed and connected to whatever was selected, and Tab adds the next one already joined to it. Nothing is uploaded: the page is served with a Content Security Policy that forbids the browser from making any outbound request at all.

Open the diagram maker