Security Think Tank: Look to security best practices to secure DNS

What are the main security risks associated with DNS and how are these best mitigated?