+APP.3.6.A15 Analysis of Log Data (S)

APP.3.6.A15 Analysis of Log Data (S)

DNS server log data SHOULD be checked regularly. The DNS server log data SHOULD be evaluated regularly. At a minimum, the following security-relevant events SHOULD be evaluated:

  • number of DNS requests
  • number of errors in DNS requests
  • errors in extension mechanisms for DNS (EDNS)
  • expiring zones
  • failed zone transfers
  • changes in the ratio of errors to DNS requests

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

Ceanglais

3. Rialacháin ghaolmhara

Rialacháin

Saincheisteanna nasctha

Naisc
blocks G 0.22 Manipulation of Information
blocks G 0.25 Failure of Devices or Systems
blocks G 0.27 Lack of Resources
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems