Best Practice Detail

13-12-8046

Network Operators, Service Providers and Public Safety should protect against DNS server compromise by implementing protection such as physical security, removing all unnecessary platform services, monitoring industry alert channels for vulnerability exposures, scanning DNS platforms for known vulnerabilities and security breaches, implementing intrusion detection on DNS home segments, not running the name server as root user/minimizing privileges where possible, and blocking the file system from being compromised by protecting the named directory. This applies to Public Safety only in an NG9-1-1 environment.

Status: Rollover New

References/Comments: RFC-2870 ISO/IED 15408 ISO 17799 US-CERT \"\"Securing an Internet Name Server\"\" NIST SP 800-81 & SP 800-81 R1 Secure Domain Name System(DNS) Deployment Guide.

Historical events:

• Network Operators
• Service Providers
• Public Safety
• Internet/Data
• Cyber Security
• Network Elements
• Network Operations
• Public Safety Service
• Intrusion Detection
• CSRIC VII: Rollover New In CSRIC VII