+APP.3.6.A15 Analysis of Log Data (S)

APP.3.6.A15 Analysis of Log Data (S)

DNS server log data SHOULD be checked regularly. The DNS server log data SHOULD be evaluated regularly. At a minimum, the following security-relevant events SHOULD be evaluated:

  • number of DNS requests
  • number of errors in DNS requests
  • errors in extension mechanisms for DNS (EDNS)
  • expiring zones
  • failed zone transfers
  • changes in the ratio of errors to DNS requests

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.22 Manipulation of Information
blocks G 0.25 Failure of Devices or Systems
blocks G 0.27 Lack of Resources
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems