Name: Transforming Security Effectiveness with DNS Detection and Response
Start: 2024-07-10T01:00:00Z
End: 2024-07-10T01:00:45.000Z
Location: BrightTALK
Rating: 5

Infoblox unites networking and security to deliver unmatched performance and protection. Trusted by Fortune 100 companies and emerging innovators, we provide real-time visibility and control over who and what connects to your network, so your organization runs faster and stops threats earlier.

In today's fast-paced digital landscape, a well-configured Domain Name System (DNS) infrastructure is crucial for ensuring optimal network performance, reliability, and security.

In this session, we'll explore key DNS strategies, including using anycast to streamline stub resolver configuration and enhance path selection based on roundtrip time. We'll also discuss the benefits of a hidden primary for efficient dynamic update management and the importance of diversifying external authoritative DNS servers across subnets, networks, and Autonomous Systems to improve resilience and reduce single points of failure.

Through real-world examples and practical insights, you'll learn how to optimize DNS configuration for peak performance, scalability, and security. Whether you're an experienced professional or new to networking, this webinar will equip you with essential knowledge and best practices to elevate your DNS setup.

Join Chief DNS Architect Cricket Liu for this informative webinar on the top 10 DNS configuration best practices every networking professional should know. Register now to discover essential strategies that will set you apart in the ever-evolving world of networking and drive better outcomes for your organization.

10 Essential DNS Configuration Best Practices for Performance and Resilience

Sophisticated cyberattacks have become increasingly successful at bypassing defenses, challenging defenders to evaluate their current defense-in-depth capabilities and look for new ways to strengthen their detection and response capabilities. This webinar will highlight key changes in the threat, technology, and defense landscapes behind this problem as well as explore the unique potential for DNS Detection and Response (DNSDR) to fill those gaps with real-world use cases. 
 
Key points that will be discussed during this webinar include:
- Challenges with Traditional Security Approaches: Conventional tools like EDR, NDR, and firewalls operate in silos, lacking the comprehensive visibility needed to preempt attacks. These tools react to compromises rather than preventing them.
- The Untapped Value of DNS: DNS infrastructure, being universal and integral to network operations, offers a unique vantage point. It sees all network assets and user activities and can intercept threats before other tools see them.
- Advanced Capabilities of DNS Detection and Response: This approach integrates AI and data science to analyze DNS patterns, detect anomalies, and identify malicious activities early. It can block phishing, malware, ransomware, and other threats before they materialize.
- Real-World Impact and Business Outcomes: Case studies demonstrate significant reductions in security-related downtime, operational costs, and alert fatigue, thereby improving the overall effectiveness of security operations.
 
Join this webinar for a deep dive into how DNS can be the linchpin of your cybersecurity strategy, ensuring robust protection in an increasingly complex threat environment. By easily incorporating DNS Detection and Response into your security architecture, your organization can achieve a more proactive defense posture while enhancing protection across all vectors and transforming overall security effectiveness.

Transforming Security Effectiveness with DNS Detection and Response

The frequency of ransomware attacks is staggering, with 317.59 million ransomware attempts recorded in 2023. Last year, 59% of organizations were hit with ransomware, and 56% of those attacked paid the ransom to get data back. Even if companies have backups and don’t have to pay ransoms to get the data back, in a third of the incidents, data was also stolen.
 
Recovery is costly and it goes beyond the ransom payment.  It cost companies $2.73 million on average to recover from these attacks. Disruption to business, such as shutting down of critical city services or hotel reservations not going through after a ransomware attack, is another major concern.   
 
More recently, AI is being leveraged to create more variants and advanced polymorphic ransomware to avoid detection from security tools, as well as to increase efficiency and effectiveness of phishing and reconnaissance used by ransomware actors. While most security tools try to look for malware and its behavior, chasing malware and their variants is a never ending game and you are always behind.  
 
With DNS threat intelligence, it is much harder for ransomware actors to hide. Tracking domains owned by threat actors even before they start creating and deploying the attack helps in proactive identification and blocking of ransomware threats.  The first DNS query to these domains can be blocked protecting organizations at the earliest point in the attack.
 
Join this webinar to learn about:
- Recent ransomware attacks and their business impact
- DNS infrastructure based threat detection vs Malware based threat detection
- How to stay protected against constantly evolving ransomware attacks

Breaking the Ransomware Supply Chain Using DNS Threat Intelligence

Join us for an insightful webinar where we’ll dive into the transformative power of Infoblox’s critical network services for hybrid cloud environments. We’ll explore three compelling use cases, demonstrating how businesses have leveraged Infoblox to overcome network challenges and optimize their cloud journey.
 
Our first case highlights an online print and design company that chose Infoblox to consolidate their fragmented network infrastructure across multiple platforms. The second case involves a leading financial services firm that turned to Infoblox after experiencing significant cloud-native DNS outages. Lastly, we’ll discuss a Mexican American media company that chose Infoblox to enhance network reliability and reduce latency by integrating a robust DNS solution that supports automation across multi-cloud environments, including AWS and Microsoft Azure.
 
These real-world examples underscore Infoblox’s ability to deliver reliable, uninterrupted services, facilitate automation, and provide centralized management of critical network services in hybrid and multi-cloud environments. Discover how Infoblox can simplify your network management and enhance your cloud strategy. Join us to learn more!

Unlocking Hybrid Cloud Potential: Real-World Success with Infoblox

Cybersecurity teams face an ever-rising tide of alerts from a multitude of siloed tools. Stopping and investigating fast-moving threats has never been more urgent, but it is increasingly difficult to achieve. Watch the webinar to discover how DNS-based defences and tactics greatly improve threat response times and investigation efficiency. Watch the webinar and learn:

• The vital role that DNS plays in early threat detection
• The use of curated threat intelligence from DNS-based sources
• How DNS-based security can cut through the noise and accelerate threat investigation

Raise SecOps Efficiency Through Insight-Driven Security

The MITRE ATT&CK framework is a powerful defensive tool, enabling security teams to “think like an attacker”. Because DNS plays a pivotal role in cyber threats, knowledge of DNS is critical to the effectiveness of MITRE ATT&CK. Watch the webinar and learn:

• Where in attack sequences DNS is invoked
• Ways that DNS data provides early detection of threats described in MITRE ATT&CK
• How DNS Detection and Response can close security gaps MITRE ATT&CK reveals

Optimising MITRE ATT&CK with DNS

As your network keeps pace with technology changes by deploying multiple cloud providers, management challenges multiply. Fragmented views, lack of integration, inadequate automation—all erode network performance and drive costs higher and increase security risks. Watch this webinar as we explore ways to simplify networking across hybrid and multi-cloud environments. Attend and discover:
• The unique management challenges and risks that multi-cloud environment present
• Integrated approaches for gaining visibility and control of multi-cloud workloads
• Why automation is vital to network performance and resilience—and how to achieve it

Unified Network Management in a Multi-Cloud World

While most of the world is now implementing hybrid, multi-cloud infrastructure, operations teams now face a mission-critical mandate to better manage today’s complex multi-cloud environments. In fact, new research by the Enterprise Strategy Group highlights this reality with 76% of respondents reporting that their teams are under pressure to be more agile to accelerate developer velocity.

A converged approach to hybrid, multi-cloud networking leveraging an enterprise-grade DNS, DHCP and IPAM (DDI) platform is foundational to multi-cloud maturity, but there are headwinds with EMA research showing that only 41% of organizations have been successful in their DDI implementation.

This webinar will cover both the impediments to DDI success, and best practices employed by more mature organizations by exploring:

- Cloud Disruption: The networking team implementing DDI tools are often disconnected from the cloud engineering and DevOps teams to effectively influence the use of DDI in a platform approach.
- Siloed DDI: The use of separate tools by separate teams to manage separate environments results in a lack of integration between the network and business systems, monitoring solutions, and automation tools exacerbating the visibility gap.
- DDI Security Blindspot: A lack of confidence in DNS security and a lack of focus on securing IPAM and DHCP leaves organizations vulnerable to a range of network-based attacks.
- The Central Role of Collaboration: Just as DevOps removed organizational and cultural barriers between teams, so too must a collaborative approach be employed to bring DDI implementations to platform and cloud engineering teams.
- DDI to Support the Emergence of AI Workload: AI workloads are not only compute and storage intensive, they are networking intensive requiring reliant and performant connectivity to assure the right data is collected and transferred to the right LLM or data lake in support of business requirements.

Operationalizing DDI for a Unified and Secure Approach to Multi-cloud Networking

The traditional malware-centric approach to threat detection is fast becoming obsolete and inadequate. Most security solutions use a post-incident-centric approach to threat detection, blocking attacks once an initial compromise has happened. But that is too late.
 
Threat actors have become more sophisticated, often exploiting the vulnerability of remote employees and using lookalike domains to launch MFA attacks, which in fact was the single most visible and threatening attack of 2023. While some actors like to register and age domains before using them in attacks several months down the line, others like to register a domain and launch an attack within minutes, sometimes targeting a specific organization.
 
A true paradigm shift is necessary—one that can proactively protect enterprises from criminal actors as they build their infrastructure. Infoblox Threat Intel combines market-leading DNS expertise with cutting-edge data science to identify threat actor infrastructure before the actors use them and disrupts communications to those high-risk domains.
 
Join this webinar to learn from the global head of threat intel on how Infoblox:
 
- Connects the dots and tracks threat actors in DNS, with examples
- Reduces MTTD  and proactively mitigates targeted attacks within minutes of a domain getting registered
- Improves the efficacy of existing security and observability tools

Infoblox Threat Intel – Disrupting Cybercrime Where It Begins – DNS

DNS Security

dns protection

Artificial Intelligence

Cybersecurity

Threat Actor

Detection and Response

Cybercrime

Security

Welcome to the mobile computing community on BrightTALK! With the consumerization of IT and the widespread adoption of mobile devices across the globe, mobile computing has become an important part of many people's lives in a culture of bring your own device (BYOD). With mobile devices doubling as work phones and more employees working from home, businesses need to provide secure access to data and work applications from anywhere at any time. Join this growing community and hear from industry thought leaders in webinars and videos as they share their insight on mobile computing research and trends.

Mobile Computing

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Transforming Security Effectiveness with DNS Detection and Response

Presented by

About this talk

More from this channel