--- title: "DNS and Network-Flood Threats" canonical: "https://docs.infoblox.com/space/nios90/280269994/DNS%20and%20Network-Flood%20Threats" format: markdown --- DNS is a tempting target for attacks given that it is a core Internet service. Attackers can send malformed DNS queries or DNS responses to the targeted server, hoping to exploit bugs in its DNS implementation. Other variants include code insertion, buffer overflows, memory corruption, NULL pointer dereferencing, and specific vulnerability exploits. DNS attacks tend to follow specific patterns but can be difficult to deal with using only rate-limiting techniques, because of the sheer scale of many recent attacks. DNS infrastructure protection is designed to grow and expand over time, through DNS infrastructure protection rule updates, to deal with both outside-in and inside-out attacks on network infrastructure and Internet services. Following are some of the network-flood attacks that can target your DNS caching and authoritative servers: - [*Internet Control Message Protocol (ICMP) Flood*](https://infoblox-docs.atlassian.net/wiki/spaces/nios90/pages/280275714) - [*SYN Flood*](https://infoblox-docs.atlassian.net/wiki/spaces/nios90/pages/280408632) - [*UDP DNS Flood*](https://infoblox-docs.atlassian.net/wiki/spaces/nios90/pages/280668656) - [*Inside-Out Attacks*](https://infoblox-docs.atlassian.net/wiki/spaces/nios90/pages/280668676) - [*DNS Cache Poisoning*](https://infoblox-docs.atlassian.net/wiki/spaces/nios90/pages/280668697) - [*DNS Reflection and Amplification Attacks*](https://infoblox-docs.atlassian.net/wiki/spaces/nios90/pages/280668714) - [*DNS Malware*](https://infoblox-docs.atlassian.net/wiki/spaces/nios90/pages/280275750) - [*DNS Domain Hijacking*](https://infoblox-docs.atlassian.net/wiki/spaces/nios90/pages/280408676)