The growing threat of DDoS attacks on DNS

According to the 2014 Annual Security Report, DNS is an easy exploit and that organizations need to understand that they have little choice but to work around its weakness. A DDoS attack is simply generated by using an organization's DNS infrastructure. Hackers hijack the system to send queries to name servers across the Internet from a spoof IP address of their target. The name servers in return send back responses. According to the Information Age, of the all the steps that companies can take to protect themselves from such attacks is to recognize when a DDoS attack is taking place. Many organizations don't know what their query load is, and when their under attack as well. There are statistics support built into the DNS software called BIND. With this, administrators are able to analyze their data for socket errors, query rates, and other attack indicators. This may not show you exactly how the attack looks like but the organizations can have a better understanding of what the trends are.