Story image

IBM Security collaborates to launch anti-DNS tracking service

28 Nov 17

IBM Security has teamed up with the Global Cyber Alliance and Packet Clearing House to launch a free service designed to give businesses and consumers more privacy and protection whilst browsing the internet.

The solution, called Quad9 Domain Name (DNS) Service, protects users from accessing malicious internet sites that are known to steal information, infect users with malware or conduct fraudulent activity.

The services uses DNS protocols to filter out the internet trouble spots. DNS services translate text-based web addresses into the IP addresses behind websites.

According to IBM Security, many people do not realise that DNS services capture data about the websites they visit, their location and what device they are accessing the website from. This data can be sold to marketers and data brokers by DNS providers or internet service providers.

“Protecting against attacks by blocking them through DNS has been available for a long time, but has not been used widely,” comments Global Cyber Alliance CEO Philip Reitinger.

“Sophisticated corporations can subscribe to dozens of threat feeds and block them through DNS, or pay a commercial provider for the service. However, small to medium-sized businesses and consumers have been left behind – they lack the resources, are not aware of what can be done with DNS, or are concerned about exposing their privacy and confidential information.”

The companies engineered Quad9’s DNZS service so that it does not store, correlate or leverage any personally identifiable information from its users, unlike many other DNS services.

The companies explain that when a Quad9 user clicks on a link or types an address into their web browser, the Quad9 service checks the site against IBM X-Force’s threat intelligence database of over 40 billion analysed web pages and images.

As part of the checking process, Quad9 draws on intelligence from other threat intelligence partners including Abuse.ch, the Anti-Phishing Working Group, Bambenek Consulting, F-Secure, mnemonic, 360Netlab, Hybrid Analysis GmbH, Proofpoint, RiskIQ, and ThreatSTOP.

The service has been rolled out to traditional PCs and laptops, as well as internet-connected devices like TVs and IoT devices such as smart thermostats.

The companies say that IoT devices in particular are vulnerable because they traditionally do not receive security updates.

With Quad9, smart devices would be blocked from accessing harmful remote hosts or botnets such as Mirai.

“Leveraging threat intelligence is a critical way to stay ahead of cybercriminals,” adds IBM Security VP of Strategy and Offering Management, Jim Brennan.

“Consumers and small businesses traditionally didn’t have free, direct access to the intelligence used by security firms to protect big businesses. With Quad9, we’re putting that data to work for the industry in an open way and further enriching those insights via the community of users. Through IBM’s involvement in Quad9, we’re applying these collaborative defense techniques while giving users greater privacy controls.”

Oracle Java Card update boosts security for IoT devices
"Java Card 3.1 is very significant to the Internet of Things, bringing interoperability, security and flexibility to a fast-growing market currently lacking high-security and flexible edge security solutions."
Sophos hires ex-McAfee SVP Gavin Struther
After 16 years as the APAC senior vice president and president for McAfee, Struthers is now heading the APJ arm of Sophos.
Half of companies unable to detect IoT device breaches
A Gemalto study also shows that the of blockchain technology to help secure IoT data, services and devices has doubled in a year.
Huawei founder publically denies spying allegations
“After all the evidence is made public, we will rely on the justice system.”
Malware downloader on the rise in Check Point’s latest Threat Index
Organisations continue to be targeted by cryptominers, despite an overall drop in value across all cryptocurrencies in 2018.
IoT breaches: Nearly half of businesses still can’t detect them
The Internet of Thing’s (IoT’s) rapid rise to prominence may have compromised its security, if a new report from Gemalto is anything to go by.
Carbon Black: What does cybersecurity have in store for 2019?
Tom Kellerman has shared five insights for the year ahead, including a particularly bold one.
Hands-on review: The Ekster Wallet protects your cards against RFID attacks
For some time now, I’ve been protecting my credit cards with tinfoil. The tinfoil hat does attract a lot of comments, but thanks to Ekster, those days are now happily behind me.