ASM and DNS Resolution: Dealing with DNS Poisoning at Scale

In this more technical episode, we dive deep into the complexities of DNS and DNS resolution in the context of Attack Surface Management (ASM). Join us as we explore the unseen challenges that arise when scaling asset discovery, particularly when dealing with DNS wildcards and their implications for security scanning solutions.
Our hosts, Michael and Shubs, share their extensive experiences in managing DNS resolution at scale, discussing the importance of accurate asset discovery and the pitfalls of relying solely on IP-centric approaches. They highlight the significance of DNS data in understanding attack surfaces and the need for robust wildcard detection to filter out junk assets effectively.
We also touch on the technical challenges faced when building a reliable DNS resolution infrastructure, the limitations of popular cloud providers like AWS, and the importance of observability in ensuring accurate results. Additionally, we share insights from a recent presentation on DNS poisoning at scale, revealing how unexpected patterns can lead to significant security implications.
Topics Covered:
- The importance of DNS resolution in ASM
- Challenges with DNS wildcards and asset discovery
- IP-centric vs. DNS-centric approaches
- Building a reliable DNS resolution infrastructure
- Insights on DNS poisoning and its implications

[@GarthHumphreys]

These videos and knowledge has been so helpful. Thanks for sharing this. It certainly has me thinking about asset discovery and DNS in a more deeper way.

[@crlfff]

I really appreciate these discussions thank you guys

[@bloatless]

interesting ...

[@__-tc3sr]

is this a reupload? Seems the same content as The Unknown Complexities of DNS Resolution