Data Security AssessmentProtect Your DNS, Protect Your Business!

Brochure

33% of organizations were victims of data theft via DNSDNS Threat Survey 2018 (Coleman Parkes & EfficientIP)

Benefits• Receive advice and support

to address complex security vulnerabilities and protect sensitive data

• Ensure your DNS configuration is optimal and operating efficiently

• Understand how to enhance your threat detection capability to protect against stealth or weak signal attacks “under the radar”

• Deal with dynamic threats on your network (APT, botnets, ransomware..) which cannot be effectively handled by firewalls alone

• Learn how to ensure continuity of service using adaptive countermeasures

Your Data Confidentiality Test: Exfiltration of Data via DNSIn order to verify your protection against data theft, EfficientIP offer a swift security assessment of your existing DNS architecture and protection systems in place.

The data security assessment includes *: 9 A workshop with your teams to check DNS configurations in your network

9 A penetration test / exfiltration test of your current DNS servers · Only read-only actions will be performed · No modifications made to existing configuration · Pen testing is carried out from EfficientIP’s specifically-

designed toolkit

What You’ll ReceiveA Detailed Assessment Report Containing:

9 Checks performed & summary of results 9 Evidence of exfiltration success 9 Recommended actions to improve: protection against data theft / security of resources and users / continuity of service / service quality, performance and user experience

An Onsite Results Presentation to Your Technical and Management Teams

9 Explanation of assessment results 9 Review of recommended actions

* Details and any pre-requisites will be specified in the Statement of Work for your project.

www.efficientip.com

To sign up for your security assessment, please contact us.

For Effective Network Defense, First Understand Your Main Security Flaw - DNSEnsuring network security is becoming more and more complex with the advent of trends such as IoT, BYoD and Cloud. DNS service is mission-critical for providing access to applications & services, hence is considered the cornerstone of network infrastructures.

However, DNS is open by nature and is rarely monitored or analysed, making it the easiest targets for cyber criminals as most malicious activity usually slips under the radar. This makes DNS exfiltration an «easier» option than other means of data theft. In fact, over 90% of malware use DNS to gain command and control, exfiltrate data or redirect traffic. Restricted DNS traffic analysis or basic blocking countermeasures used by standard security systems such as next-gen firewalls or proxies imply serious security risks:

Customer Data TheftBusiness Downtime

Intellectual Property TheftEmbezzlement of Money

GDPR Non-ComplianceDamaged Reputation

«

»

« Importantly, EfficientIP continuously monitors complete DNS transactions. This means that hackers attempting to stay below the radar in terms of, for example, record length or frequency, are still likely to be detected »

- IDC Technology Spotlight: Dealing with DNS-Based Data Breaches to Avoid GDPR Non-Compliance, 2017

Data Exfiltration Detection: Example report content

DNS Threat Survey 2018 (Coleman Parkes & EfficientIP)