{"id":476898,"date":"2023-08-09T09:05:02","date_gmt":"2023-08-09T09:05:02","guid":{"rendered":""},"modified":"2023-09-05T11:13:38","modified_gmt":"2023-09-05T11:13:38","slug":"dns-hijacking","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/jp\/wiki\/dns-hijacking\/","title":{"rendered":"DNS\u30cf\u30a4\u30b8\u30e3\u30c3\u30af"},"content":{"rendered":"<p>DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306f\u3001DNS \u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u307e\u305f\u306f DNS \u30dd\u30a4\u30ba\u30cb\u30f3\u30b0\u3068\u3082\u547c\u3070\u308c\u3001\u30b5\u30a4\u30d0\u30fc\u72af\u7f6a\u8005\u304c\u30c9\u30e1\u30a4\u30f3 \u30cd\u30fc\u30e0 \u30b7\u30b9\u30c6\u30e0 (DNS) \u89e3\u6c7a\u30d7\u30ed\u30bb\u30b9\u3092\u64cd\u4f5c\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3059\u308b\u60aa\u8cea\u306a\u624b\u6cd5\u3067\u3059\u3002DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306e\u76ee\u7684\u306f\u3001\u6b63\u5f53\u306a DNS \u30af\u30a8\u30ea\u3092\u60aa\u8cea\u306a\u30b5\u30fc\u30d0\u30fc\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u3068\u76ee\u7684\u306e\u30aa\u30f3\u30e9\u30a4\u30f3 \u30b5\u30fc\u30d3\u30b9\u9593\u306e\u901a\u4fe1\u3092\u5236\u5fa1\u3059\u308b\u3053\u3068\u3067\u3059\u3002\u3053\u306e\u9ad8\u5ea6\u306a\u653b\u6483\u306f\u3001\u30d5\u30a3\u30c3\u30b7\u30f3\u30b0\u3001\u30c7\u30fc\u30bf\u76d7\u96e3\u3001\u6a5f\u5bc6\u60c5\u5831\u3078\u306e\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u306a\u3069\u3001\u6df1\u523b\u306a\u7d50\u679c\u3092\u3082\u305f\u3089\u3059\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<h2>DNS\u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306e\u8d77\u6e90\u3068\u305d\u306e\u6700\u521d\u306e\u8a00\u53ca\u306e\u6b74\u53f2<\/h2>\n<p>DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306e\u8d77\u6e90\u306f\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u306e\u9ece\u660e\u671f\u306b\u9061\u308a\u307e\u3059\u3002DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u304c\u521d\u3081\u3066\u6ce8\u76ee\u3055\u308c\u305f\u306e\u306f\u3001\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u8005\u304c DNS \u30b5\u30fc\u30d0\u30fc\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u59cb\u3081\u305f 1990 \u5e74\u4ee3\u5f8c\u534a\u3067\u3059\u3002\u9577\u5e74\u306b\u308f\u305f\u308a\u3001DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u3067\u4f7f\u7528\u3055\u308c\u308b\u6280\u8853\u3068\u624b\u6cd5\u306f\u9032\u5316\u3057\u3001\u3088\u308a\u6d17\u7df4\u3055\u308c\u3066\u691c\u51fa\u304c\u56f0\u96e3\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n<h2>DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306b\u95a2\u3059\u308b\u8a73\u7d30\u60c5\u5831\u3002DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306e\u30c8\u30d4\u30c3\u30af\u3092\u62e1\u5f35\u3057\u307e\u3059\u3002<\/h2>\n<p>DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306f\u4e3b\u306b DNS \u89e3\u6c7a\u306e\u64cd\u4f5c\u3092\u4f34\u3044\u307e\u3059\u3002DNS \u30b7\u30b9\u30c6\u30e0\u306f\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u306e\u30a2\u30c9\u30ec\u30b9\u5e33\u3068\u3057\u3066\u6a5f\u80fd\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u30d5\u30ec\u30f3\u30c9\u30ea\u306a\u30c9\u30e1\u30a4\u30f3\u540d\u3092\u3001\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u304c\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u4e0a\u3067\u4e92\u3044\u306e\u4f4d\u7f6e\u3092\u7279\u5b9a\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3059\u308b IP \u30a2\u30c9\u30ec\u30b9\u306b\u5909\u63db\u3057\u307e\u3059\u3002\u30e6\u30fc\u30b6\u30fc\u304c Web \u30b5\u30a4\u30c8\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3088\u3046\u3068\u3059\u308b\u3068\u3001\u30c7\u30d0\u30a4\u30b9\u306f DNS \u30af\u30a8\u30ea\u3092 DNS \u30b5\u30fc\u30d0\u30fc\u306b\u9001\u4fe1\u3057\u3001\u30c9\u30e1\u30a4\u30f3\u540d\u3092\u5bfe\u5fdc\u3059\u308b IP \u30a2\u30c9\u30ec\u30b9\u306b\u89e3\u6c7a\u3057\u307e\u3059\u3002<\/p>\n<p>\u5178\u578b\u7684\u306a DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u653b\u6483\u3067\u306f\u3001\u653b\u6483\u8005\u306f DNS \u30b5\u30fc\u30d0\u30fc\u306b\u4e0d\u6b63\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3001\u305d\u306e\u30ec\u30b3\u30fc\u30c9\u3092\u5909\u66f4\u3057\u307e\u3059\u3002\u3053\u306e\u5909\u66f4\u306b\u306f\u3001\u30c9\u30e1\u30a4\u30f3\u540d\u306b\u95a2\u9023\u4ed8\u3051\u3089\u308c\u305f IP \u30a2\u30c9\u30ec\u30b9\u306e\u5909\u66f4\u3001\u653b\u6483\u8005\u304c\u7ba1\u7406\u3059\u308b\u4e0d\u6b63\u306a\u30b5\u30fc\u30d0\u30fc\u3078\u306e\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306e\u8ee2\u9001\u304c\u542b\u307e\u308c\u308b\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u3002\u64cd\u4f5c\u3055\u308c\u305f DNS \u30b5\u30fc\u30d0\u30fc\u306f\u3001DNS \u30af\u30a8\u30ea\u306b\u5bfe\u3057\u3066\u60aa\u610f\u306e\u3042\u308b IP \u30a2\u30c9\u30ec\u30b9\u3067\u5fdc\u7b54\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u3092\u6b63\u5f53\u306a\u30b5\u30fc\u30d0\u30fc\u3067\u306f\u306a\u304f\u653b\u6483\u8005\u306e\u30b5\u30fc\u30d0\u30fc\u306b\u8a98\u5c0e\u3057\u307e\u3059\u3002<\/p>\n<h2>DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306e\u5185\u90e8\u69cb\u9020\u3002DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306e\u4ed5\u7d44\u307f\u3002<\/h2>\n<p>DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306e\u30d7\u30ed\u30bb\u30b9\u306b\u306f\u3044\u304f\u3064\u304b\u306e\u30b9\u30c6\u30c3\u30d7\u304c\u542b\u307e\u308c\u3066\u304a\u308a\u3001\u5404\u30b9\u30c6\u30c3\u30d7\u306f\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306e\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3092\u6210\u529f\u3055\u305b\u308b\u305f\u3081\u306b\u91cd\u8981\u3067\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>DNS\u30b5\u30fc\u30d0\u30fc\u3092\u4fb5\u5bb3\u3059\u308b<\/strong>\u653b\u6483\u8005\u306f\u3001\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u305f\u308a\u3001\u30bd\u30fc\u30b7\u30e3\u30eb \u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0\u306a\u3069\u306e\u65b9\u6cd5\u3092\u4f7f\u7528\u3057\u3066\u3001\u5bfe\u8c61\u306e DNS \u30b5\u30fc\u30d0\u30fc\u306b\u30a2\u30af\u30bb\u30b9\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>DNS\u30ec\u30b3\u30fc\u30c9\u306e\u5909\u66f4<\/strong>: \u653b\u6483\u8005\u306f\u3001DNS \u30ec\u30b3\u30fc\u30c9 (\u901a\u5e38\u306f\u300cA\u300d(\u30a2\u30c9\u30ec\u30b9) \u307e\u305f\u306f\u300cCNAME\u300d(\u6b63\u898f\u540d) \u30ec\u30b3\u30fc\u30c9) \u3092\u5909\u66f4\u3057\u3066\u3001\u30c9\u30e1\u30a4\u30f3\u3092\u60aa\u610f\u306e\u3042\u308b IP \u30a2\u30c9\u30ec\u30b9\u306b\u30dd\u30a4\u30f3\u30c8\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u4f1d\u642c<\/strong>DNS \u30ec\u30b3\u30fc\u30c9\u306b\u306f\u30ad\u30e3\u30c3\u30b7\u30e5\u671f\u9593\u304c\u3042\u308b\u305f\u3081\u3001\u60aa\u610f\u306e\u3042\u308b\u60c5\u5831\u306f DNS \u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u5168\u4f53\u306b\u5e83\u304c\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30e6\u30fc\u30b6\u30fc\u30af\u30a8\u30ea<\/strong>: \u30e6\u30fc\u30b6\u30fc\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30c9\u30e1\u30a4\u30f3\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3088\u3046\u3068\u3059\u308b\u3068\u3001\u30c7\u30d0\u30a4\u30b9\u306f DNS \u30af\u30a8\u30ea\u3092\u9001\u4fe1\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>DNS\u5fdc\u7b54<\/strong>: \u64cd\u4f5c\u3055\u308c\u305f DNS \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u30e6\u30fc\u30b6\u30fc\u306e\u30af\u30a8\u30ea\u306b\u5bfe\u3057\u3066\u60aa\u610f\u306e\u3042\u308b IP \u30a2\u30c9\u30ec\u30b9\u3067\u5fdc\u7b54\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30e6\u30fc\u30b6\u30fc\u306e\u30ea\u30c0\u30a4\u30ec\u30af\u30c8<\/strong>: \u30e6\u30fc\u30b6\u30fc\u306e\u30c7\u30d0\u30a4\u30b9\u306f\u3001\u610f\u56f3\u3057\u305f Web \u30b5\u30a4\u30c8\u3067\u306f\u306a\u304f\u3001\u653b\u6483\u8005\u306e\u30b5\u30fc\u30d0\u30fc\u306b\u63a5\u7d9a\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>DNS\u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306e\u4e3b\u306a\u7279\u5fb4\u306e\u5206\u6790<\/h2>\n<p>DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306e\u4e3b\u306a\u7279\u5fb4\u306f\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n<ul>\n<li>\n<p><strong>\u30b9\u30c6\u30eb\u30b9\u6027<\/strong>DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u653b\u6483\u306f\u9577\u671f\u9593\u6c17\u4ed8\u304b\u308c\u305a\u306b\u6b8b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u304c\u6a5f\u5bc6\u60c5\u5831\u3092\u53ce\u96c6\u3057\u305f\u308a\u3001\u305d\u306e\u4ed6\u306e\u60aa\u610f\u306e\u3042\u308b\u6d3b\u52d5\u3092\u5b9f\u884c\u3057\u305f\u308a\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5e83\u7bc4\u56f2\u306b\u308f\u305f\u308b\u5f71\u97ff<\/strong>DNS \u306f\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 \u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u306e\u57fa\u672c\u7684\u306a\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3067\u3042\u308b\u305f\u3081\u3001\u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u653b\u6483\u306f\u591a\u6570\u306e\u30e6\u30fc\u30b6\u30fc\u3068\u30b5\u30fc\u30d3\u30b9\u306b\u5f71\u97ff\u3092\u53ca\u307c\u3059\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6301\u7d9a\u6027<\/strong>: \u4e00\u90e8\u306e\u653b\u6483\u8005\u306f\u3001\u4fb5\u5bb3\u3055\u308c\u305f DNS \u30b5\u30fc\u30d0\u30fc\u3092\u9577\u671f\u7684\u306b\u5236\u5fa1\u3057\u3001\u60aa\u610f\u306e\u3042\u308b\u6d3b\u52d5\u3092\u7d99\u7d9a\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u591a\u69d8\u306a\u52d5\u6a5f<\/strong>DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306f\u3001\u30b9\u30d1\u30a4\u6d3b\u52d5\u3001\u30c7\u30fc\u30bf\u76d7\u96e3\u3001\u91d1\u878d\u8a50\u6b3a\u3001\u691c\u95b2\u306a\u3069\u3001\u3055\u307e\u3056\u307e\u306a\u76ee\u7684\u3067\u4f7f\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ul>\n<h2>DNS\u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306e\u7a2e\u985e<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u30bf\u30a4\u30d7<\/th>\n<th>\u8aac\u660e<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>\u4e2d\u9593\u8005 (MITM)<\/strong><\/td>\n<td>\u653b\u6483\u8005\u306f\u3001\u30e6\u30fc\u30b6\u30fc\u3068\u6b63\u898f\u306e DNS \u30b5\u30fc\u30d0\u30fc\u9593\u306e\u901a\u4fe1\u3092\u508d\u53d7\u3057\u3001DNS \u30af\u30a8\u30ea\u306b\u5bfe\u3057\u3066\u507d\u306e\u5fdc\u7b54\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>\u30eb\u30fc\u30bf\u30fc\u30d9\u30fc\u30b9\u306eDNS\u30cf\u30a4\u30b8\u30e3\u30c3\u30af<\/strong><\/td>\n<td>\u653b\u6483\u8005\u306f\u30eb\u30fc\u30bf\u30fc\u306e DNS \u8a2d\u5b9a\u3092\u4fb5\u5bb3\u3057\u3001\u3059\u3079\u3066\u306e DNS \u30af\u30a8\u30ea\u3092\u60aa\u610f\u306e\u3042\u308b DNS \u30b5\u30fc\u30d0\u30fc\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>\u30d5\u30a1\u30fc\u30df\u30f3\u30b0<\/strong><\/td>\n<td>\u653b\u6483\u8005\u306f\u30de\u30eb\u30a6\u30a7\u30a2\u3092\u4f7f\u7528\u3057\u3066\u30e6\u30fc\u30b6\u30fc\u306e\u30ed\u30fc\u30ab\u30eb DNS \u8a2d\u5b9a\u3092\u5909\u66f4\u3057\u3001\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u60aa\u610f\u306e\u3042\u308b\u30b5\u30a4\u30c8\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>DNS \u30ad\u30e3\u30c3\u30b7\u30e5\u30dd\u30a4\u30ba\u30cb\u30f3\u30b0<\/strong><\/td>\n<td>\u653b\u6483\u8005\u306f\u3001\u30ad\u30e3\u30c3\u30b7\u30e5 DNS \u30b5\u30fc\u30d0\u30fc\u306b\u507d\u306e DNS \u30ec\u30b3\u30fc\u30c9\u3092\u633f\u5165\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u306b\u60aa\u610f\u306e\u3042\u308b IP \u30a2\u30c9\u30ec\u30b9\u3092\u63d0\u4f9b\u3059\u308b\u3088\u3046\u306b\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>\u4e0d\u6b63\u306a DNS \u30b5\u30fc\u30d0\u30fc<\/strong><\/td>\n<td>\u653b\u6483\u8005\u306f\u4e0d\u6b63\u306a DNS \u30b5\u30fc\u30d0\u30fc\u3092\u8a2d\u5b9a\u3057\u3001\u30de\u30eb\u30a6\u30a7\u30a2\u3084\u30bd\u30fc\u30b7\u30e3\u30eb \u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0\u3092\u4ecb\u3057\u3066\u305d\u308c\u3092\u62e1\u6563\u3057\u3001\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>NXDOMAIN\u30cf\u30a4\u30b8\u30e3\u30c3\u30af<\/strong><\/td>\n<td>\u653b\u6483\u8005\u306f\u3001\u5b58\u5728\u3057\u306a\u3044\u30c9\u30e1\u30a4\u30f3\u30af\u30a8\u30ea\u306b\u5bfe\u3057\u3066\u3001\u4e88\u60f3\u3055\u308c\u308b\u30a8\u30e9\u30fc\u5fdc\u7b54\u3067\u306f\u306a\u304f\u3001\u60aa\u610f\u306e\u3042\u308b IP \u30a2\u30c9\u30ec\u30b9\u3067\u5fdc\u7b54\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>DNS\u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306e\u4f7f\u7528\u65b9\u6cd5\u3001\u4f7f\u7528\u306b\u95a2\u9023\u3059\u308b\u554f\u984c\u3068\u305d\u306e\u89e3\u6c7a\u7b56<\/h2>\n<p>DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306f\u3001\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u3055\u307e\u3056\u307e\u306a\u65b9\u6cd5\u3067\u5229\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30d5\u30a3\u30c3\u30b7\u30f3\u30b0\u653b\u6483<\/strong>\u653b\u6483\u8005\u306f\u3001\u6b63\u898f\u306e Web \u30b5\u30a4\u30c8\u3092\u6a21\u5023\u3057\u305f\u507d\u306e Web \u30b5\u30a4\u30c8\u306b\u30e6\u30fc\u30b6\u30fc\u3092\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3057\u3001\u30ed\u30b0\u30a4\u30f3\u8a8d\u8a3c\u60c5\u5831\u306a\u3069\u306e\u6a5f\u5bc6\u60c5\u5831\u3092\u6f0f\u6d29\u3059\u308b\u3088\u3046\u306b\u8a98\u5c0e\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30de\u30eb\u30a6\u30a7\u30a2\u306e\u914d\u5e03<\/strong>DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306f\u3001\u30de\u30eb\u30a6\u30a7\u30a2\u3092\u30db\u30b9\u30c8\u3057\u3066\u3044\u308b\u30b5\u30a4\u30c8\u306b\u30e6\u30fc\u30b6\u30fc\u3092\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3057\u3001\u30de\u30eb\u30a6\u30a7\u30a2\u306e\u914d\u5e03\u3092\u5bb9\u6613\u306b\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u4e2d\u9593\u8005\u653b\u6483<\/strong>: \u653b\u6483\u8005\u306f\u3001\u30ed\u30b0\u30a4\u30f3\u8a8d\u8a3c\u60c5\u5831\u3084\u8ca1\u52d9\u60c5\u5831\u306a\u3069\u306e\u6a5f\u5bc6\u30c7\u30fc\u30bf\u3092\u8ee2\u9001\u4e2d\u306b\u508d\u53d7\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u691c\u95b2\u3068\u76e3\u8996<\/strong>: DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306f\u3001\u653f\u5e9c\u3084 ISP \u304c\u7279\u5b9a\u306e Web \u30b5\u30a4\u30c8\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u30d6\u30ed\u30c3\u30af\u3057\u305f\u308a\u3001\u30e6\u30fc\u30b6\u30fc\u306e\u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3\u3092\u76e3\u8996\u3057\u305f\u308a\u3059\u308b\u305f\u3081\u306b\u5229\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<p>DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306b\u5bfe\u6297\u3059\u308b\u306b\u306f\u3001\u3044\u304f\u3064\u304b\u306e\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u3092\u5b9f\u88c5\u3067\u304d\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>DNSSEC (\u30c9\u30e1\u30a4\u30f3\u30cd\u30fc\u30e0\u30b7\u30b9\u30c6\u30e0\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u62e1\u5f35)<\/strong>DNSSEC \u306f\u3001DNS \u30c7\u30fc\u30bf\u306b\u30c7\u30b8\u30bf\u30eb\u7f72\u540d\u3057\u3066\u6539\u3056\u3093\u3092\u9632\u6b62\u3059\u308b\u3053\u3068\u3067\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u5c64\u3092\u8ffd\u52a0\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>DNS\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3068\u76e3\u8996<\/strong>: DNS \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u5b9a\u671f\u7684\u306b\u76e3\u8996\u3057\u3001DNS \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3092\u5b9f\u88c5\u3059\u308b\u3068\u3001\u60aa\u610f\u306e\u3042\u308b\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u8b58\u5225\u3057\u3066\u30d6\u30ed\u30c3\u30af\u3059\u308b\u306e\u306b\u5f79\u7acb\u3061\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u591a\u8981\u7d20\u8a8d\u8a3c (MFA)<\/strong>MFA \u306f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u5c64\u3092\u8ffd\u52a0\u3057\u3001DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u304c\u767a\u751f\u3057\u305f\u5834\u5408\u3067\u3082\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u306e\u30ea\u30b9\u30af\u3092\u8efd\u6e1b\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u4e3b\u306a\u7279\u5fb4\u3084\u305d\u306e\u4ed6\u306e\u985e\u4f3c\u7528\u8a9e\u3068\u306e\u6bd4\u8f03\u3092\u8868\u3084\u30ea\u30b9\u30c8\u306e\u5f62\u5f0f\u3067\u793a\u3057\u307e\u3059\u3002<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u5b66\u671f<\/th>\n<th>\u8aac\u660e<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>DNS\u30cf\u30a4\u30b8\u30e3\u30c3\u30af<\/strong><\/td>\n<td>DNS \u89e3\u6c7a\u3092\u64cd\u4f5c\u3057\u3066\u3001\u30e6\u30fc\u30b6\u30fc\u3092\u60aa\u610f\u306e\u3042\u308b\u30b5\u30fc\u30d0\u30fc\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>DNS\u30b9\u30d7\u30fc\u30d5\u30a3\u30f3\u30b0<\/strong><\/td>\n<td>DNS \u30c7\u30fc\u30bf\u3092\u507d\u9020\u3057\u3066\u3001\u30e6\u30fc\u30b6\u30fc\u3092\u9a19\u3057\u3066\u5225\u306e IP \u30a2\u30c9\u30ec\u30b9\u306b\u63a5\u7d9a\u3055\u305b\u308b\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>DNS \u30dd\u30a4\u30ba\u30cb\u30f3\u30b0<\/strong><\/td>\n<td>DNS \u30b5\u30fc\u30d0\u30fc\u4e0a\u306e DNS \u30ad\u30e3\u30c3\u30b7\u30e5 \u30c7\u30fc\u30bf\u3092\u7834\u640d\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u3092\u60aa\u610f\u306e\u3042\u308b\u30b5\u30a4\u30c8\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>DNSSEC (\u30c9\u30e1\u30a4\u30f3\u30cd\u30fc\u30e0\u30b7\u30b9\u30c6\u30e0\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u62e1\u5f35)<\/strong><\/td>\n<td>DNS \u30d7\u30ed\u30c8\u30b3\u30eb\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u8ffd\u52a0\u3057\u3001DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u3092\u9632\u6b62\u3059\u308b\u62e1\u5f35\u6a5f\u80fd\u30b9\u30a4\u30fc\u30c8\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>DNS\u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306b\u95a2\u3059\u308b\u4eca\u5f8c\u306e\u5c55\u671b\u3068\u6280\u8853<\/h2>\n<p>\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\u304c\u9032\u6b69\u3059\u308b\u306b\u3064\u308c\u3066\u3001DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306b\u4f7f\u7528\u3055\u308c\u308b\u624b\u6cd5\u3082\u9032\u5316\u3057\u307e\u3059\u3002\u8003\u616e\u3059\u3079\u304d\u5c06\u6765\u306e\u5c55\u671b\u306f\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>AI\u30d9\u30fc\u30b9\u306e\u691c\u51fa<\/strong>: \u4eba\u5de5\u77e5\u80fd\u3068\u6a5f\u68b0\u5b66\u7fd2\u3092\u4f7f\u7528\u3057\u3066\u3001DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u3092\u30ea\u30a2\u30eb\u30bf\u30a4\u30e0\u3067\u691c\u51fa\u3057\u3001\u9632\u6b62\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30d6\u30ed\u30c3\u30af\u30c1\u30a7\u30fc\u30f3\u30d9\u30fc\u30b9\u306eDNS<\/strong>: \u30d6\u30ed\u30c3\u30af\u30c1\u30a7\u30fc\u30f3\u6280\u8853\u3092\u5b9f\u88c5\u3057\u3066\u3001DNS \u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u3092\u5206\u6563\u5316\u3057\u3001\u4fdd\u8b77\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30bc\u30ed\u30c8\u30e9\u30b9\u30c8\u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3<\/strong>\u3059\u3079\u3066\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30bb\u30b0\u30e1\u30f3\u30c8\u304c\u4fe1\u983c\u3055\u308c\u3066\u3044\u306a\u3044\u3068\u60f3\u5b9a\u3059\u308b\u30bc\u30ed \u30c8\u30e9\u30b9\u30c8 \u30a2\u30d7\u30ed\u30fc\u30c1\u3092\u63a1\u7528\u3057\u3001DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u306e\u5f71\u97ff\u3092\u8efd\u6e1b\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u30d7\u30ed\u30ad\u30b7\u30b5\u30fc\u30d0\u30fc\u304c\u3069\u306e\u3088\u3046\u306b\u4f7f\u7528\u3055\u308c\u3001DNS\u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u3068\u95a2\u9023\u4ed8\u3051\u3089\u308c\u308b\u304b<\/h2>\n<p>\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u3092 DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u3068\u7d44\u307f\u5408\u308f\u305b\u3066\u4f7f\u7528\u3059\u308b\u3068\u3001\u653b\u6483\u8005\u306e\u6d3b\u52d5\u3092\u3055\u3089\u306b\u96e3\u8aad\u5316\u3067\u304d\u307e\u3059\u3002\u653b\u6483\u8005\u304c\u5236\u5fa1\u3059\u308b\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u3092\u4ecb\u3057\u3066\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3059\u308b\u3053\u3068\u3067\u3001\u653b\u6483\u8005\u306f\u81ea\u5206\u306e\u8eab\u5143\u3068\u610f\u56f3\u3092\u3055\u3089\u306b\u96a0\u3059\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u3055\u3089\u306b\u3001\u653b\u6483\u8005\u306f\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306e DNS \u89e3\u6c7a\u30d7\u30ed\u30bb\u30b9\u3092\u64cd\u4f5c\u3057\u3066\u3001\u30e6\u30fc\u30b6\u30fc\u304c\u6b63\u5f53\u306a\u30b5\u30fc\u30d3\u30b9\u306b\u63a5\u7d9a\u3057\u3066\u3044\u308b\u3068\u4fe1\u3058\u8fbc\u307e\u305b\u306a\u304c\u3089\u3001\u60aa\u610f\u306e\u3042\u308b\u30b5\u30fc\u30d3\u30b9\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3059\u308b\u3053\u3068\u3082\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>OneProxy \u306e\u3088\u3046\u306a\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc \u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u306f\u3001\u30b5\u30fc\u30d0\u30fc\u304c DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u308b\u306e\u3092\u9632\u3050\u305f\u3081\u306b\u3001\u5f37\u529b\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u3092\u5b9f\u88c5\u3059\u308b\u3053\u3068\u304c\u4e0d\u53ef\u6b20\u3067\u3059\u3002\u5b9a\u671f\u7684\u306a\u76e3\u8996\u3001\u6697\u53f7\u5316\u3001\u8a8d\u8a3c\u30e1\u30ab\u30cb\u30ba\u30e0\u306f\u3001\u30e6\u30fc\u30b6\u30fc\u3092\u6f5c\u5728\u7684\u306a\u8105\u5a01\u304b\u3089\u4fdd\u8b77\u3059\u308b\u306e\u306b\u5f79\u7acb\u3061\u307e\u3059\u3002<\/p>\n<h2>\u95a2\u9023\u30ea\u30f3\u30af<\/h2>\n<p>DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u3068\u305d\u306e\u9632\u5fa1\u65b9\u6cd5\u306e\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001\u6b21\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<ol>\n<li><a href=\"https:\/\/us-cert.cisa.gov\/ncas\/alerts\/TA18-024A\" target=\"_new\" rel=\"noopener nofollow\">US-CERT \u30a2\u30e9\u30fc\u30c8 (TA18-024A) \u2013 DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af \u30ad\u30e3\u30f3\u30da\u30fc\u30f3<\/a><\/li>\n<li><a href=\"https:\/\/www.imperva.com\/learn\/application-security\/dns-hijacking\/\" target=\"_new\" rel=\"noopener nofollow\">DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af: \u7a2e\u985e\u3001\u624b\u6cd5\u3001\u4fdd\u8b77<\/a><\/li>\n<li><a href=\"https:\/\/www.cloudflare.com\/learning\/dns\/dnssec\/how-does-dnssec-work\/\" target=\"_new\" rel=\"noopener nofollow\">DNSSEC \u3068\u306f\u4f55\u3067\u3059\u304b? \u3069\u306e\u3088\u3046\u306b\u6a5f\u80fd\u3057\u307e\u3059\u304b?<\/a><\/li>\n<li><a href=\"https:\/\/www.cisco.com\/c\/en\/us\/products\/security\/what-is-zero-trust.html\" target=\"_new\" rel=\"noopener nofollow\">\u7d44\u7e54\u306b\u30bc\u30ed\u30c8\u30e9\u30b9\u30c8 \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u5b9f\u88c5\u3059\u308b\u65b9\u6cd5<\/a><\/li>\n<\/ol>\n<p>DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u3084\u305d\u306e\u4ed6\u306e\u30b5\u30a4\u30d0\u30fc\u8105\u5a01\u304b\u3089\u8eab\u3092\u5b88\u308b\u306b\u306f\u3001\u5e38\u306b\u60c5\u5831\u3092\u5165\u624b\u3057\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u30d9\u30b9\u30c8 \u30d7\u30e9\u30af\u30c6\u30a3\u30b9\u3092\u5b9f\u88c5\u3059\u308b\u3053\u3068\u304c\u975e\u5e38\u306b\u91cd\u8981\u3067\u3042\u308b\u3053\u3068\u3092\u5fd8\u308c\u306a\u3044\u3067\u304f\u3060\u3055\u3044\u3002<\/p>","protected":false},"featured_media":476899,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476898","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>DNS Hijacking: An Encyclopedia Article<\/mark>","faq_items":[{"question":"What is DNS hijacking?","answer":"<p>DNS hijacking, also known as DNS redirection or DNS poisoning, is a malicious technique used by cybercriminals to manipulate the Domain Name System (DNS) resolution process. The aim of DNS hijacking is to redirect legitimate DNS queries to a malicious server, thereby controlling the communication between users and the intended online services.<\/p>"},{"question":"How does DNS hijacking work?","answer":"<p>DNS hijacking involves compromising a DNS server and altering its records. The attacker changes the IP address associated with a domain name, diverting traffic to a rogue server they control. When users try to access the affected domain, their devices receive responses with the malicious IP address, redirecting them to the attacker's server.<\/p>"},{"question":"What are the key features of DNS hijacking?","answer":"<p>DNS hijacking is stealthy, widespread in impact, persistent, and serves diverse motivations such as espionage, data theft, financial fraud, and censorship.<\/p>"},{"question":"What are the types of DNS hijacking?","answer":"<ul><li>Man-in-the-Middle (MITM): Attackers intercept communication between users and legitimate DNS servers, providing falsified responses.<\/li><li>Router-based DNS hijacking: Attackers compromise a router's DNS settings, redirecting all queries to a malicious DNS server.<\/li><li>Pharming: Attackers use malware to modify a user's local DNS settings, redirecting traffic to malicious sites.<\/li><li>DNS Cache Poisoning: Attackers inject false DNS records into caching DNS servers, serving malicious IPs to users.<\/li><li>Rogue DNS server: Attackers set up a rogue DNS server to redirect traffic via malware or social engineering.<\/li><li>NXDOMAIN hijacking: Attackers respond to non-existent domain queries with malicious IPs instead of error responses.<\/li><\/ul>"},{"question":"How can DNS hijacking be used, and what are the problems and solutions?","answer":"<p>DNS hijacking can be utilized for phishing, malware distribution, man-in-the-middle attacks, censorship, and surveillance. To combat it, implement DNSSEC, DNS filtering and monitoring, and Multi-Factor Authentication (MFA).<\/p>"},{"question":"What are the perspectives and future technologies related to DNS hijacking?","answer":"<p>The future may bring AI-based detection, blockchain-based DNS, and zero-trust architecture to combat DNS hijacking more effectively.<\/p>"},{"question":"How are proxy servers associated with DNS hijacking?","answer":"<p>Proxy servers can be used with DNS hijacking to add an extra layer of obfuscation, hiding the attacker's identity. Proxy server providers like OneProxy must implement robust security measures to prevent their servers from being exploited in such attacks.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/476898","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/476898\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media\/476899"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media?parent=476898"}],"curies":[{"name":"\u3046\u30fc\u3093","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}