DNS Query ID Attack Attacker spoofs DNS replies DNS cache poisoning Blind attack requires guessing The standard (src ip, src port, dest ip, dest port) 16 bit DNS request ID