DNS, DHCP, IPAM — most people within IT understand how these ensure connectivity. But they can, and should, also be leveraged as the major defenses for your network.

On this episode of the ThreatTalk podcast, Krupa Srivatsan joined us to discuss the security defense methodologies inherent within DHS, DHCP, & IPAM.

Krupa is the Director of Product Marketing at Infoblox. She has an MBA from Berkeley, and has worked with Pfizer, Agilent, Cisco Systems, and others.

What we talked about:
DNS, DHCP, & IPAM
IOT
Network Insights — key feature of Infoblox’s security system
NetMRI
NIST core functions
Improving branch officer experience
Multi Cloud

How the NIST Cybersecurity Framework Helps You Stop Today’s Cyberthreats

Did you know that over 90% of the malware incidents and over half of all ransomware and data theft attacks rely on DNS as a vector. In today’s day and age, securing your DNS has never been more critical. Today we’re joined by , a member of the  product marketing team, who is responsible for service provider and DNS privacy messaging. David fills us in on biggest security concerns and how to secure your DNS infrastructure. To listen to this episode and many more like it, subscribe to ThreatTalk on  or tune in .

12. Securing Your DNS Infrastructure

How can anyone manage their security when so much is literally out of their control within a 3rd party SaaS or BYOD?&nbsp; A breach is going to happen so limit the impact using Zero Trust principles:&nbsp;  Focus on the Data Trust no user&nbsp; Trust no communication Deny access by default and provide minimal access when required&nbsp;&nbsp;  Consulting Senior Product Marketing Manager at ,  Zuckerman, joins Threat Talk to discuss Zero Trust in detail.&nbsp; Designed with Data at the heart of the protection strategy, Zero Trust uses fundamental IT technology such as DNS filtering, encryption and microsegmentation as key components to control access and limit exposure. You can find this interview, and many more, by subscribing to the ThreatTalk podcast on  or on .

13. Fundamentals of Zero Trust Principles

The EVP Engineering and Chief DNS Architect at , , joins us on Threat Talk to talk about DNS Flag Days – why we need them and how they are improving the internet.&nbsp; DNS Flag Days serve notices to obsolete Domain Name System (DNS) servers that existing accommodations to provide them with compatibility for pre-1999 standards will be phased out.&nbsp; The Flag Days attempt to:  Speed up DNS Improve DNS reliability Improve DNS security  In 1999, DNS was extended with eDNS(0), yet servers incompatible with eDNS(0) continue to be used today.&nbsp; To improve the performance of the internet, the 2019 DNS flag day temporarily ceased to support those legacy DNS servers. The 2020 Flag Day will tackle the maximum DNS message size to bring them down under 1232 bytes.&nbsp; This will stop DNS message fragmentation and improve both the reliability and security of DNS. You can find this interview, and many more, by subscribing to the ThreatTalk podcast on  or on .

14. DNS Flag Days Improve the Internet

How can a heralded new feature from Firefox be dangerous? When the consumer-protecting DNS over HTTPS (DoH) feature creates a default that dangerously bypasses enterprise security and exposes organizations to serious risks. Krupa Srivastan, Director of Product Marketing at Infoblox, discusses key issues with DoH and best practices to regain control of the DNS traffic to protect the enterprise environment.

15. Hidden Dangers with DNS Over HTTPS

How can an enterprise protect a surge of remote users? Everyone is scrambling to deal with the consequences of the COVID19 quarantine.&nbsp; Enterprises suddenly shifted their employees from primarily within the office to primarily working from home.&nbsp; Now security managers must somehow extend the corporate security stack to non-technical employees working on home networks. , Director of Product Marketing at Infoblox, joins ThreatTalk to cover 5 key threats for the remote worker. With so many threats, an enterprise security team needs to respond quickly and efficiently.&nbsp; The best way to do that is to focus on the common denominator: everything uses DNS.&nbsp;&nbsp; Srivatsan explains how cloud-based DNS with analytics allows an enterprise to remotely protect the employee.&nbsp; Security managers can restrict the remote worker to safe domains, protect against data exfiltration, and limit command and control commands from already-infected devices.&nbsp;&nbsp; You can find this interview, and many more, by subscribing to the ThreatTalk podcast on  or on .&nbsp;

16. 5 Key Threats for Remote Workers

Most organizations think DNS security means that they must secure their various DNS systems.&nbsp; However, using DNS security strategically overlays an overarching layer of security capabilities across the enterprise. When harnessing DNS security, an organization can:  Bypass the need to configure of hundreds or thousands of firewalls to block specific addresses or websites.&nbsp;&nbsp; Secure remote users without VPN overhead.&nbsp;&nbsp; Control access for cloud resources, datacenters, and containers with a single, simple unifying policy.&nbsp;&nbsp; Detect infrastructure attacks early in the Mitre Framework stages before data exfiltration or command and control attacks can begin  Michael Katz joins ThreatTalk to discuss how DNS enhances the capabilities of firewalls by taking a broader look at the traffic within an organization.&nbsp; They discuss three key strategies to implementing DNS and cover key DNS mistakes most organizations make when developing their security strategies.

17. Find Threats Faster Using DNS

Don’t be stuck in the IT stone age!&nbsp; The castle walls of defense in depth are down or at least damaged due to a combination of constant attack and the digital transformation. The digital transformation constantly moves data away from traditional enterprise control:  Rapid expansion of SaaS Applications hosted everywhere Branch offices on SDWANs Explosion of IoT Teleworkers logging in from unsecured locations  Michael Zuckerman joins ThreatTalk to discuss how adopting a robust framework like ISO27001 and ISO27002 can provide a roadmap to taking the initiative back from the attackers.&nbsp; The ISO standards provide key policies and procedures that inform the actions to be taken in advance or in response to an attack. DNS security products provide the extended visibility necessary to implement ISO frameworks beyond the network by encompassing cloud resources and remote users.&nbsp; Combined with NAC devices, DNS security provides foundational security to detect, block, and quarantine infected machines and return control to the enterprise.

18. ISO Roadmaps to Foundational Security

Security teams are at war.&nbsp; Every day, attackers, tactics, techniques, and procedures evolve and are used to assault IT security defenses. Enterprises must choose frameworks to help organize their cyber-defense playbooks and run their operations.&nbsp; The CIS framework provides one of the best options to develop an organization’s security strategies for long term success. Michael Zukerman joins ThreatTalk to detail the CIS Framework and how it guides an organization to develop critical security fundamentals.&nbsp; Michael outlines the three categories of controls within the CIS Framework in detail and their benefits:  6 essential Basic Security Controls all organizations must adopt 10 highly recommended Security Foundational controls 4 Organization Security Controls for people, policies, and compliance.  After discussing each of the 20 controls, Michael illustrates how Infoblox Threat Defense implements foundational security for DNS, DHCP and IPAM across the entire enterprise.&nbsp; Unlike a traditional security stack, Infoblox can provide visibility and control critical for CIS into all enterprise environments including cloud resources and remote employees.

19. The CIS Framework and Foundational Security

In our age of digital transformation, everything is moving to the cloud, including the management of devices, users and applications. 

The Infoblox ThreatTalk podcast brings you the latest thinking on how to tap the full potential of the cloud while making the most of your existing network security solutions. 

In each episode, leading cybersecurity experts share insights and practical advice on how to raise network security and automation to the next level across diverse on-premises, virtual and public, private and hybrid cloud infrastructure. 

Topics include secure cloud migration, DNS security, malware mitigation, infrastructure protection, integrated threat response and much more.

Infoblox ThreatTalk

Popular tracks