Using Proactive Intelligence Against Adversary Infrastructure>
Security Boulevard – David Ratner
Organizations can’t prevent all breaches but can build resilience against cyberattacks using protective DNS (PDNS) and understanding adversary infrastructure.
Key Points
Independent tester AV-TEST found Hyas Protect to be the most effective PDNS solution for business continuity and resilience.
PDNS is recommended by CISA, NSA, and required by DoD, as it enables early detection and blocking of threats.
Rather than only trying to keep attackers out, focus on identifying “digital exhaust” – signs of compromise communicating with adversary infrastructure.
Log4j and SolarWinds attacks showed how PDNS can catch threats missed by other tools through this approach.
AV-TEST scoring showed Hyas Protect PDNS over 80-90% effective at catching various attack types with low false positives.
PDNS should integrate into existing security stacks for defense-in-depth approach.
Combining PDNS and understanding adversary infrastructure helps organizations shift from reactive to proactive security.
Key Takeaways
Since breaches can’t be fully prevented, resilience is crucial
PDNS provides early visibility into threats inside networks
Tracking adversary infrastructure enables more proactive defense
Link: https://securityboulevard.com/2024/02/using-proactive-intelligence-against-adversary-infrastructure/