Despite significant investments in security technologies, botnets remain a serious risk to organizations of all sizes. Nominum leverages the world’s largest DNS data network and adaptive learning technologies to detect botnets better and faster than alternatives and uses our Vantio Intelligent DNS solutions deployed in-network and/or our SKYE Resolution hosted network service to disable these botnets safely and automatically.
The Need
Botnets are the scourge of the Internet. They send spam, launch denial of service attacks, serve malicious content, steal confidential information—and more. At best, botnets add cost by generating useless traffic—and at worst, they can bring down entire networks or steal critical corporate or customer information. Existing protection measures are inadequate. Desktop solutions fail to detect over half of new threats and burden end users, while most network-based solutions are difficult to deploy and unable to scale with the massive increase in network traffic. First of all, this leads to extra load on network resources (over half of DNS traffic may be malicious), leading to unnecessary over investment in network resources. User experience is also degraded, as they perceive “the network” to be slow. Botnets also expose your users to identity theft and can lead to loss of corporate intellectual property. Finally, and most importantly, a network riddled with bots is like a ticking time bomb—it’s only a matter of time before the bots are used to attack their host network.
Our Solution
Nominum turns the tide against attackers. For the same reasons that legitimate applications rely on DNS (its pervasiveness, performance, availability, etc), attackers abuse the DNS to launch attacks. They lure unsuspecting users to malicious domains that download viruses that then use the DNS to “phone home” and send stolen information from end users’ PCs. Botnets also use the DNS to target victims with spam and DDoS attacks. Because attackers rely on the DNS, it’s an ideal platform (with the right technology) to identify threats and protect users.
Nominum’s Network Protection Solution harnesses our massively scalable Vantio Intelligent DNS systems outfitted with Vantio MDR policy software modules and combined with the SKYE Network Protection Service to provide an integrated in/off-network solution that eliminates harmful traffic and protects networks from attacks. First, Nominum’s dedicated research team of security and networking experts constantly updates our database of DNS threat intelligence—the largest such database in the world. This data is then automatically published to the Vantio MDR module in our customer networks as often as every minute. Armed with this data, the Vantio MDR module instructs the Vantio Intelligent DNS systems to block “botted” computers from communicating with the botnet command and control servers—essentially rendering the botnet useless. The activity is fully logged, and the aggregated statistics can be used for improving overall network security and reducing network vulnerability.
Network Protection Solution
Network Protection Solution
Despite significant investments in security technologies, botnets remain a serious risk to organizations of all sizes. Nominum leverages the world’s largest DNS data network and adaptive learning technologies to detect botnets better and faster than alternatives and uses our Vantio Intelligent DNS solutions deployed in-network and/or our SKYE Resolution hosted network service to disable these botnets safely and automatically.
The Need
Botnets are the scourge of the Internet. They send spam, launch denial of service attacks, serve malicious content, steal confidential information—and more. At best, botnets add cost by generating useless traffic—and at worst, they can bring down entire networks or steal critical corporate or customer information. Existing protection measures are inadequate. Desktop solutions fail to detect over half of new threats and burden end users, while most network-based solutions are difficult to deploy and unable to scale with the massive increase in network traffic. First of all, this leads to extra load on network resources (over half of DNS traffic may be malicious), leading to unnecessary over investment in network resources. User experience is also degraded, as they perceive “the network” to be slow. Botnets also expose your users to identity theft and can lead to loss of corporate intellectual property. Finally, and most importantly, a network riddled with bots is like a ticking time bomb—it’s only a matter of time before the bots are used to attack their host network.
Our Solution
Nominum turns the tide against attackers. For the same reasons that legitimate applications rely on DNS (its pervasiveness, performance, availability, etc), attackers abuse the DNS to launch attacks. They lure unsuspecting users to malicious domains that download viruses that then use the DNS to “phone home” and send stolen information from end users’ PCs. Botnets also use the DNS to target victims with spam and DDoS attacks. Because attackers rely on the DNS, it’s an ideal platform (with the right technology) to identify threats and protect users.
Nominum’s Network Protection Solution harnesses our massively scalable Vantio Intelligent DNS systems outfitted with Vantio MDR policy software modules and combined with the SKYE Network Protection Service to provide an integrated in/off-network solution that eliminates harmful traffic and protects networks from attacks. First, Nominum’s dedicated research team of security and networking experts constantly updates our database of DNS threat intelligence—the largest such database in the world. This data is then automatically published to the Vantio MDR module in our customer networks as often as every minute. Armed with this data, the Vantio MDR module instructs the Vantio Intelligent DNS systems to block “botted” computers from communicating with the botnet command and control servers—essentially rendering the botnet useless. The activity is fully logged, and the aggregated statistics can be used for improving overall network security and reducing network vulnerability.