Names and Security
summary
Names replace addresses as the unit of identity and attackers exploit DNS for amplification, homograph spoofing and fast-changing lookups. A deployed approach collects about 100 threat feeds, maps them to per-customer white/black lists and pushes policies via DNS to edge routers using response policy zones. Edge blocking drops malicious lookups before servers see them, recovering 10–30% bandwidth in typical deployments. The talk shows a working, automated pipeline and argues name‑based reputation and filtering are practical defenses.
AI-written summary · about
chapters (15)
- 0:00Intro
- 0:27Three principles that power the Internet
- 2:08All Distributed Systems have 3 Parts
- 2:38We get addicted to configuration...
- 5:35Partial DNS RFC family tree
- 6:15We know DNS has created security problems...
- 7:10Ripped from the headlines...
- 8:18The Basic Security Issue
- 9:12Security Economics: Cost of Defense Value of Target Cost of Attack
- 10:06Typical Enterprise Network
- 11:09The Options and Imperatives for Security
- 16:05What's this new DNS firewall thing?
- 16:24What does RPZ do
- 17:59We need choices throughout the food chain
- 19:02A few final security Nightmares
related talks
34mUsing DNS as a layer of defense
34mPractical Steps for Reducing Exposure and Detecting Compromise
22mDNS is Under Attack - the Miscreant's Offensive Playbook with a Defensive Counter
52mPower of DNS as an Added Defense Against Modern Attacks
26mMisuse of DNS, the Second Most Used Protocol
25mDark Side of the DNS Force
20mEnd-Users Get Maneuvered: Empirical Analysis of Redirection Hijacking in Content Delivery Networks
50mTowards a Holistic Approach in Building Intelligence to Fight Crimeware