Techniques to Protect Against Data Breaches via DNS

Data exfiltration can be extremely difficult to detect as it often closely resembles typical network traffic. Substantial data loss incidents therefore only become noticed long after data exfiltration has already been achieved. DNS has been found to be one of the most discrete options for cyber criminals to carry out data theft1.

The potential consequences of data exfiltration can be disastrous. They include:

• Theft of sensitive data or Intellectual Property
• Severe corporate brand damage and public media management costs
• Huge impact on customer/partner trust and associated increase in customer churn
• GDPR non-compliance, with associated massive fines

The aim of this paper is to describe how EfficientIP’s innovative solutions can be used to effectively protect data confidentiality.

As summarized by Duncan Brown in the IDC Technology Spotlight: “Enhanced DNS security is an added layer of protection when considering security and privacy for the network, data, and customers, while preserving reputation and enabling regulatory compliance such as GDPR.”