How to best secure DNS? There's more than one approach – TechTarget

Why secure DNS? A total DNS failure would make it impossible to look up an IP address for a domain name, effectively bringing the internet to a halt. It’s extraordinarily unlikely but theoretically possible since there is no practical substitute service for DNS.
Translating domain names into IP addresses is the primary purpose of DNS. Doing so reliably on a global level is what allows networks to deliver content from a single domain to clients worldwide.
But DNS also makes it possible for bad actors to build botnet command and control (C&C) networks that can evade detection and craft malicious domains for phishing or collecting ransomware payments. Fortunately, passive DNS can help with defenses.
Like air and water sustain life on Earth, DNS enables everything that happens online, and it nourishes online activity without judgment. Malicious use of DNS has been rightly seen as something that could be remedied with new protocols, like the DNS Security Extensions suite of protocols.
But criminal activity on the internet depends on DNS for the same reason that legitimate internet activity does: DNS provides a platform to exchange system reachability data. Criminals exploit this to carry out attacks on legitimate users and systems, but defenders are finding new ways to use DNS to thwart the attackers.
So how to secure DNS? Passive DNS uses networks of sensors to monitor the DNS ecosystem for suspicious domain name activity and issues alerts to block botnet C&C traffic, phishing and ransomware traffic. Defenders using passive DNS are transforming DNS from an attack vector that needs to be defended into a security tool that can detect and defeat attacks before they are carried out.
So, in our efforts to secure DNS, the cat-and-mouse security game continues. For now, defenders have regained the upper hand, and attackers seek new exploits.
Securing the DNS protocol is no joke. Learn what the DNS Security Extensions are and the efforts the United States government is taking to push DNSSEC adoption.
Get up to speed fast on means and methods for reducing or eliminating security-related issues in DNS, an integral service upon which the internet depends.
E-Handbook: How to best secure DNS? There’s more than one approach
Up Next
Few aspects of the internet are as crucial as the domain name system. It may be that a ‘passive’ approach to DNS security is the most effective approach.
Securing the DNS protocol is no joke. Learn what the DNS Security Extensions are and the efforts the United States government is taking to push DNSSEC adoption.
Get up to speed fast on means and methods for reducing or eliminating security-related issues in DNS, an integral service upon which the internet depends.
It’s not enough to build network automation workflows. It’s important to secure those workflows, as well. Access control, …
Despite early discussions about the potential of Wi-Fi 7, many enterprises are still catching up with the rapid pace of Wi-Fi …
While 5G has advanced in recent years, the fifth generation of cellular technology still presents some challenges, such as …
The White House wants to divide regulatory authority for new commercial space industry activities between the DOC and DOT, a move…
The tech upgrade brings expanded network capabilities to the NGO’s hospital ships, with improved remote consultation and dockside…
U.S.-China relations will affect U.S. businesses in 2024, whether it’s through more export controls or building alliances with …
The simplest way to fix a broken Windows 11 registry is to restore a backup, but that isn’t always possible. Find out different …
Intel’s Core Ultra CPUs now contain embedded AI neural processing, which adds options for device manufacturers to divide demand …
UEM software is vital for helping IT manage every type of endpoint an organization uses. Explore some of the top vendors and how …
The techniques used to build hybrid cloud architectures have come a long way, but managing these environments long term is plenty…
Why choose between public cloud and private systems when you can have both? With hybrid cloud, enterprises can address workload …
Outages might be rare, but they are rarely cheap — any amount of downtime can cost you money. Learn how to minimize the risks …
As 2023 draws to a close, it is time to look ahead at what enterprise leaders should be focusing their IT sustainability efforts …
The UK government’s recent clampdown on immigration could exacerbate the IT skills shortage in the country, especially in web …
The industrial metaverse and digital twins are related but are not necessarily the same – so where will digital twins play the …
All Rights Reserved, Copyright 2000 – 2023, TechTarget

Privacy Policy
Cookie Preferences
Cookie Preferences
Do Not Sell or Share My Personal Information

source

About The Author

admin

See author's posts