On the Internet, it’s not only “always DNS” – it’s also about securing DNS. DNS faces a wide range of attack vectors, each requiring different defensive strategies. Here comes an overview of DNS security, which gives you all the keywords at a glance.

This is my approach to a picture worth a thousand words. I use it during training sessions and at customers’ sites to explain concepts related to DNS security. Of course, this drawing isn’t perfect and doesn’t show every detail, but it’s a good starting point. ;) If you have any thoughts or corrections, please leave a comment below. (Thanks to Carsten Strotmann for reviewing it.)

Feel free to use it wherever you want. Please link back to this blog post.

If you want not only the poster but also a full session that explains all of this, take a look at my DNS security presentation (full video!) from SharkFest’25 EU.

Also, have a look at my at-a-glance version for mere DNS: It’s Always DNS – Poster and its corresponding presentation.

Soli Deo Gloria!

Photo by Mark James Panaligan on Unsplash.