From Liability to Asset: The Role DNS Should Be Playing in Your Security Architecture & Operations

No ratings

Presented at InfoSecurityEurope 2019 by

Steven Tee

DNS is a ubiquitous network service which has a front row seat when it comes to malware activities. Most organisations neglect to consider the scale and simplicity of using DNS as a visibility and control point. DNS servers are also home to a wealth of essential operational data that can accelerate incident investigation.This session will discuss the role that DNS could and should play in security architecture and operations as well as identify how DNS itself is increasingly used as an attack vector by malicious actors.Learning Outcomes:Understand how DNS can be used as an attack vectorLearn about how Malware uses DNS for Command & ControlLearn about Data Exfiltration & Infiltration via DNSLearn how to protect against DNS vulnerabilities and use DNS as a visibility & control point in your network