+APP.3.6.A15 Analysis of Log Data (S)

APP.3.6.A15 Analysis of Log Data (S)

DNS server log data SHOULD be checked regularly. The DNS server log data SHOULD be evaluated regularly. At a minimum, the following security-relevant events SHOULD be evaluated:

  • number of DNS requests
  • number of errors in DNS requests
  • errors in extension mechanisms for DNS (EDNS)
  • expiring zones
  • failed zone transfers
  • changes in the ratio of errors to DNS requests

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe

3. Reglementări asociate

Reglementări

Tichete legate

Legături
blocks G 0.22 Manipulation of Information
blocks G 0.25 Failure of Devices or Systems
blocks G 0.27 Lack of Resources
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems