From billion queries to action: how DNS4EU transforms threat defence

No ratings

Presented at VB2025 Berlin by

Sebastian Garcia

Tigran Oganesian

In 2023, the EU launched DNS4EU, its sovereign DNS infrastructure. Our research lab was tasked with uncovering newly emerging malicious domains in DNS queries. We built a powerful big data pipeline analysing 1.5 billion domains daily, applying advanced machine learning, Bayesian inference, and false-positive reduction. With this new system finished, we will show intelligence on recent threats, live malware activity, new attack campaigns, evolving adversary behaviour, and our research journey.