What is DNS-layer web security?

All digital devices use DNS as the first step to connect to places on the Internet; unfortunately, so do cyber criminals. Malware, ransomware, phishing, and other malicious actors need to use DNS servers to look up and connect to infrastructure that is set up by cyber criminals to power these attacks. Monitoring these requests, as well as subsequent IP connections, is an easy way to provide better accuracy and detection of malicious activity and compromised systems, improving security visibility and network protection.

Why do you need DNS-layer web security?

Monitoring DNS requests, as well as subsequent IP connections, is an easy way to provide better accuracy and detection of malicious activity and compromised systems, improving security visibility and network protection.

Nothing stops attacks earlier than DNS-layer security, becaused DNS is the first step in making a connection on the internet. If a connection is blocked at the DNS layer, it stops there. By enforcing security at the DNS layer, it stops threats before they ever reach your network or endpoints.

What are the key components of DNS Layer Web Security?

Cyber attacks have many phases before launching, as the attacker first needs to:

  • Stage internet infrastructure to support each phase of the attack. 
  • Connect the target to that infrastructure. 
  • For attacks with an objective to steal or exfiltrate data, initiate a command and control callback, which then takes command of the targeted machine. 

DNS-layer security identifies where these domains and other internet infrastructures are staged, and blocks requests over any port or protocol, preventing both infiltration and exfiltration attempts. It stops malware earlier and prevents callbacks to attackers if infected machines connect to your network.

Unlike agents, the DNS layer protection extends to every device connected to the network — even IoT. It can really can be deployed everywhere, since all internet-connected devices use recursive DNS services.

Why CT?

Unlike security products that react to known threats and add latency by re-routing every internet connection through proxy or VPN gateway, we leverage a platform for predictive intelligence to discover unknown threats and add no latency. CT DNS Security also integrates seamlessly with our fabric components, network, email, and firewalls to provide a complete picture of any malicious activity, enabling us to respond quickly and efficiently. We enable business continuity with the ability to run response and remediation on running systems, which prevents production disruptions and maintains user productivity.