Surprisingly, while the entire internet and its overall services such as browsing, emailing, ToIP, or even printing rely on DNS, its infrastructure remains poorly secured and has become one of the most attractive application layer target for hackers and malware. Additionally, Cisco unveiled that 91% of malware uses DNS protocol in some ways such as for establishing communication path with remote CnC server, operating data exfiltration or spreading deeper into targeted networks. It is even more critical for organizations to understand the risks that most used DNS server engine had 11 critical DoS vulnerabilities in 2016. As a result, 74% of companies have been targeted by DNS attacks at least once in the last 12 months (2016 EfficientIP global DNS Security survey). At the end of this workshop, participants will understand how DNS can be attacked and why it is now a target for hackers, and of course how they can protect it.