DNS is updated by UDP messages from trusted domain name sources. How can

spoofing of updates $($DNS poisoning$)$ be prevented? Note: $$Use DNSsec$$ is not really

getting to the point of the question$$what does DNSsec do$/$require$?$