Story image

IBM Security collaborates to launch anti-DNS tracking service

28 Nov 17

IBM Security has teamed up with the Global Cyber Alliance and Packet Clearing House to launch a free service designed to give businesses and consumers more privacy and protection whilst browsing the internet.

The solution, called Quad9 Domain Name (DNS) Service, protects users from accessing malicious internet sites that are known to steal information, infect users with malware or conduct fraudulent activity.

The services uses DNS protocols to filter out the internet trouble spots. DNS services translate text-based web addresses into the IP addresses behind websites.

According to IBM Security, many people do not realise that DNS services capture data about the websites they visit, their location and what device they are accessing the website from. This data can be sold to marketers and data brokers by DNS providers or internet service providers.

“Protecting against attacks by blocking them through DNS has been available for a long time, but has not been used widely,” comments Global Cyber Alliance CEO Philip Reitinger.

“Sophisticated corporations can subscribe to dozens of threat feeds and block them through DNS, or pay a commercial provider for the service. However, small to medium-sized businesses and consumers have been left behind – they lack the resources, are not aware of what can be done with DNS, or are concerned about exposing their privacy and confidential information.”

The companies engineered Quad9’s DNZS service so that it does not store, correlate or leverage any personally identifiable information from its users, unlike many other DNS services.

The companies explain that when a Quad9 user clicks on a link or types an address into their web browser, the Quad9 service checks the site against IBM X-Force’s threat intelligence database of over 40 billion analysed web pages and images.

As part of the checking process, Quad9 draws on intelligence from other threat intelligence partners including Abuse.ch, the Anti-Phishing Working Group, Bambenek Consulting, F-Secure, mnemonic, 360Netlab, Hybrid Analysis GmbH, Proofpoint, RiskIQ, and ThreatSTOP.

The service has been rolled out to traditional PCs and laptops, as well as internet-connected devices like TVs and IoT devices such as smart thermostats.

The companies say that IoT devices in particular are vulnerable because they traditionally do not receive security updates.

With Quad9, smart devices would be blocked from accessing harmful remote hosts or botnets such as Mirai.

“Leveraging threat intelligence is a critical way to stay ahead of cybercriminals,” adds IBM Security VP of Strategy and Offering Management, Jim Brennan.

“Consumers and small businesses traditionally didn’t have free, direct access to the intelligence used by security firms to protect big businesses. With Quad9, we’re putting that data to work for the industry in an open way and further enriching those insights via the community of users. Through IBM’s involvement in Quad9, we’re applying these collaborative defense techniques while giving users greater privacy controls.”

Ramping up security with next-gen firewalls
The classic firewall lacked the ability to distinguish between different kinds of web traffic.
Gartner names LogRhythm leader in SIEM solutions
Security teams increasingly need end-to-end SIEM solutions with native options for host- and network-level monitoring.
Cylance makes APIs available in endpoint detection offering
Extensive APIs enable security teams to more efficiently view, enrich, and contextualise real-time intelligence collected at the endpoint to keep systems secure.
SolarWinds adds SDN monitoring support to network management portfolio
SolarWinds announced a broad refresh to its network management portfolio, as well as key enhancements to the Orion Platform. 
JASK prepares for global rollout of their AI-powered ASOC platform
The JASK ASOC platform automates alert investigations, supposedly freeing the SOC analyst to do what machines can’t. 
Pitfalls to avoid when configuring cloud firewalls
Flexibility and granularity of security controls is good but can still represent a risk for new cloud adopters that don’t recognise some of the configuration pitfalls.
Securing hotel technology to protect customer information
Network security risks increase exponentially as hotels look to incorporate newer technologies to support a range of IoT devices, including smart door locks.
Why total visibility is the key to zero trust
Over time, the basic zero trust model has evolved and matured into what Forrester calls the Zero Trust eXtended (ZTX) Ecosystem.