Improved Defense Against Domain Name Server Man-in-the-Middle Spoofing

The Domain Name System, or DNS, is an important facility in the Internet. But for some reasons, DNS interaction is quite vulnerable to a kind of man-in-the-middle (MITM) spoofing attack. This paper illustrates the MITM spoofing attack and proposes a type of defense technique employing Naive Bayes (NB) Classifier. Considering three types of individual factors, then illustrates, analyzes and evaluates their performances. The 3-factor NB technique achieves the best performance with an average identifying ratio of 99.7875%. What's more, we provide a proposal on taking balance of precision and time consumption accordingly. In all, the presented NB technique is quite helpful in defense against DNS MITM spoofing attack.