Federal cybersecurity agencies outlined the benefits and risks of using services that assimilate information on threats into the system that routes users through the internet to help avoid visits to malware-ridden websites.
....
“Protective DNS” (PDNS) is different from earlier security-related changes to DNS in that it is envisioned as a security service – not a protocol – that analyzes DNS queries and takes action to mitigate threats, leveraging the existing DNS protocol and architecture,” reads a guide the National Security Agency and Cybersecurity and Infrastructure Security Agency published jointly this month.
The document describes all the ways such services can improve security, implementation pitfalls, and a side-by-side comparison of six providers’ capabilities in areas like deployability over hybrid architectures, support for other security features, and protection against algorithms that generate malware domains.
read more (nextgov) / PDF Attached
....
“Protective DNS” (PDNS) is different from earlier security-related changes to DNS in that it is envisioned as a security service – not a protocol – that analyzes DNS queries and takes action to mitigate threats, leveraging the existing DNS protocol and architecture,” reads a guide the National Security Agency and Cybersecurity and Infrastructure Security Agency published jointly this month.
The document describes all the ways such services can improve security, implementation pitfalls, and a side-by-side comparison of six providers’ capabilities in areas like deployability over hybrid architectures, support for other security features, and protection against algorithms that generate malware domains.
read more (nextgov) / PDF Attached
