Adventures in DNS filtering in Canada—deterring malicious activity

No ratings

Presented at BSidesVancouver 2018 by

Rob Williamson

The Canadian Internet Registration Authority (CIRA) is Canada’s non-profit domain name registry keeping over 2.7 million domain names running with a 100% up-time. We also do good things for the Internet in Canada and that includes donating over $1 million annually to Internet projects and implementing a national(ized?) approach to security. We see that despite all the redundancy, backups, firewalls, endpoint protection, and more, that the bad guys keep wreaking havoc. This presentation will:• Delve into the role of Canadian Internet Exchange Points (IXPs) in providing an infrastructure resistant to DDoS attacks• Review the architecture of CIRA’s authoritative DNS infrastructure in IXPs• Introduce our latest peered cloud service, a policy-enabled recursive service that is currently protecting over 500,000 users across Canada giving us great Canadian data science• Look at how we detect and block malware and phishing using the DNS.