+APP.3.6.A15 Analysis of Log Data (S)

APP.3.6.A15 Analysis of Log Data (S)

DNS server log data SHOULD be checked regularly. The DNS server log data SHOULD be evaluated regularly. At a minimum, the following security-relevant events SHOULD be evaluated:

  • number of DNS requests
  • number of errors in DNS requests
  • errors in extension mechanisms for DNS (EDNS)
  • expiring zones
  • failed zone transfers
  • changes in the ratio of errors to DNS requests

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.22 Manipulation of Information
blocks G 0.25 Failure of Devices or Systems
blocks G 0.27 Lack of Resources
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems