HostExploit has indicated that open and misconfigured DNS resolvers can be used in amplified distributed denial-of-service (DDoS) attacks. How can an organization tell if its DNS resolvers are being used for such attacks, and how can DNS resolvers be secured?