Detection and prevention of DNS spoofing attacks
Artem A. Maksutov, Ilya A. Cherepanov, Maksim S. Alekseev · 2017
One of the modern MitM-attacks on HTTPS is attacks using SSLstrip and SSLstrip+ utilities, the latter of which uses a DNS-spoofing type attack. Currently, there are several ways to protect against replacing DNS responses, but there is no available and simple tool for detecting a DNS-spoofing attack. The utility designed for this is called DNSwitch and was described in this article.