DNS settle have names for has anyplace online while ARP just purposes IP locations of hosts and switch interfaces inside the equivalent subnet.
Both dns poisoning and arp poisoning involves- spoofing
While DNS harming parodies IP locations of authentic destinations and its impact can spread across various organizations and servers, ARP harming parodies actual addresses (MAC addresses) inside a similar organization portion (subnet).
What is a spoofing attack?
When an adversary engages in spoofing, they are attempting to steal data, spread malware, or circumvent access control systems by impersonating an authorized device or user.
There are numerous distinct forms of spoofing; however, the following are the three that are most frequently seen:
- IP address spoofing is a form of network attack in which the attacker transmits packets over the network using a spoofed IP address.
- ARP spoofing is when an attacker connects their MAC address to an IP address that is already permitted for use on the network.
- DNS spoofing is when an attacker starts a threat like cache poisoning in order to divert traffic that is supposed to go to a certain domain name to a different IP address.
Both dns poisoning and arp poisoning involves spoofing either MAC address or cache.
DNS Poisoning attack:
In a DNS poisoning attack, sometimes called DNS cache poisoning or DNS spoofing, an attacker exploits DNS vulnerabilities to introduce bogus DNS records. The attacker uses the phony DNS entry to send traffic to a fake domain. Most DNS servers exploit forged query responses. A DNS record is poisoned when an attacker adds a bogus entry.
The fake entry, which is the poison, is put into the system at one place and can then spread to other places. To understand how DNS poisoning works, you must first grasp how DNS works. If you know DNS’s purpose and how it works, proceed to “How is DNS poisoning done?”
What is DNS?
Computers are recognized using IP (Internet Protocol) addresses, which are numeric identifiers. To find and talk to computers that host resources on the internet quickly and easily, human-readable names must be mapped to IP addresses.
DNS is the internet’s phonebook. When you know a person’s name, a phone book can provide their number. DNS helps people find servers on the internet by mapping names to IP addresses. DNS makes the internet human-usable.
ARP Spoofing Attacks
By resolving IP addresses to a particular MAC (Media Access Control) address, the Address Resolution Protocol (ARP) allows for the identification of machines on a network that is authorized to be there. An attacker can do ARP spoofing by sending ARP packets to a network, making it look as though the packets came from legal devices. Because other machines on the network will believe the attacker is legitimate, they will eagerly provide data back to the attacker, which the attacker can then utilize for additional assaults that are more complex.
Conclusion
Both dns poisoning and arp poisoning involves Man-in-the-Middle attacks. The primary distinction between these two is the addressing format and the size at which they occur.
While DNS poisoning spoofs genuine sites’ IP addresses and has the potential to spread across various networks and servers, ARP poisoning spoofs physical addresses (MAC addresses) inside the same network segment (subnet).
Read Also: Which of the following are breach prevention best practices?
An attacker use ARP cache poisoning (or ARP poison routing) to deceive the network into believing that their MAC address is the one associated with an IP address, causing data sent to that IP address to be routed wrongly to the attacker. This allows the attacker to listen in on all network traffic between its targets.
