IPAM Services Security
Michael Joseph Dooley, Timothy Rooney · 2020
There are a number of security threats to DHCP information and in its communications with those requesting information. This chapter then turns to DNS and vulnerabilities to DNS infrastructure, which includes not only the DNS servers themselves but also the DNS resolvers which query for address lookups on behalf of user applications on end-user devices, the integrity of DNS information, and the collective DNS service of resolving host-names on behalf of resolvers. Authoritative poisoning attacks attempt to corrupt DNS information published within authoritative DNS servers. The stub resolver on a client device must be initialized with at least one DNS server IP address to which DNS queries can be issued. If an administrator uses a separate configuration tool such as a DNS GUI or IPAM system, entry mistakes or uncaught errors could corrupt a zone’s information.