Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
DNS tunneling hides non-DNS data inside DNS queries to bypass firewalls for command-and-control or exfiltration; detected via query anomalies.
DNS Tunneling Definition: DNS tunneling hides non-DNS data inside DNS queries to bypass firewalls for command-and-control or exfiltration; detected via query anomalies.
DNS tunneling is a covert technique that encodes non-DNS data inside DNS queries and responses, exploiting the fact that DNS traffic is frequently allowed through firewalls. Attackers use it to establish command-and-control channels or exfiltrate data past network perimeter controls. Detection focuses on anomalies such as unusually long subdomains, high query volume to a single domain, and uncommon record types, often monitored through DNS logging and analytics.
Turn knowledge into credentials with our instructor-led cybersecurity boot camps.
View All Courses →