Audit of information infrastructure objects using DNS tunnel technology

Abstract

This paper investigates the application of DNS tunnel technology as a method for auditing information infrastructure objects by assessing the resilience of network security controls and monitoring mechanisms. The proposed approach demonstrates how controlled DNS tunneling can be used to identify weaknesses in traffic inspection, intrusion detection, and data exfiltration prevention while ensuring that security assessments are conducted in an authorized and measurable manner. The study discusses the effectiveness of the proposed auditing methodology and provides recommendations for improving the detection and mitigation of covert DNS-based communication channels in modern information infrastructures.