View source for Emerging attack vectors - RSA slide deck

{{Publication
|Image=dnscommand.jpg
|Link=http://pen-testing.sans.org/blog/2012/03/07/emerging-attack-vectors-rsa-slide-deck pen-testing.sans.org
|Author=Ed Skoudis
|NomRevue=RSA Conference
|Date=2012-03-07
|Year=2012
|CCProtocol=DNS
|Abstract=With DNS as a command and control channel, now the victim machine doesn’t need outbound connectivity at all …as long as it can resolve names through a name server with recursive 
look-ups on the Internet, it can reach the attacker: CNAME, TXT, SOA, etc
}}