In previous posts, Pat Barnes has discussed the risks associated with BYOD, and a DNS-based approach for reducing those risks. Essentially this approach consisted of making use of an enterprise's caching DNS server to monitor and block DNS queries to known botnet command and control (C&C) domains. Finding these C&C domains is something Nominum does quite well.
Nominum researches and continually discovers botnet C&C domains. Nominum offers the Network Protection Service, which provides a proprietary feed of botnet related and other malicious command and control (C&C) domains. To produce the industry's best network protection feed, Nominum has established a dedicated security research team that is responsible for data collection, correlation and analysis and implementation of network protection algorithms. By virtue of Nominum's global footprint, processing more than one trillion queries daily, Nominum is in a unique position to offer a truly real-time, adaptive, global feed of C&C domains. The security team uses this data and a variety of techniques and inputs, such as traffic pattern analysis, malware reverse engineering and nameserver reputation, to derive the this feed. This feed is pushed to Nominum's Vantio Caching DNS engine residing in-network, which then uses the feed to block and monitor C&C domains.
Recently, we introduced our Security Intelligence application, which provides in-network reporting on the monitoring and blocking efforts of the Network Protection service feed. Some of the benefits of this new application include:
If you would like to learn more about the Network Protection service and the Security Intelligence application, contact us at email@example.com.
Nominum is the worldwide leading provider of integrated subscriber, network and security solutions for network operators. Nominum is the provider of the N2 Platform that leverages over a trillion DNS queries daily and enables the rapid development and seamless integration of applications that leverage DNS data. These applications are generated by the Nominum IDEAL ecosystem, an open ecosystem of application providers. (Learn More)
|Cybersquatting||Policy & Regulation|
|DNS Security||Registry Services|
|IP Addressing||White Space|
Minds + Machines