Threat of the month: P2P DNS

January 3, 2011

P2P DNS

What is it?
P2P DNS is the latest proposal for an alternative Domain Name System (DNS) service, one that strives to replace ICANN as the authority. The concept is not new but has gained momentum recently.

How does it work?
The basic premise is to decentralize DNS records across nodes of a peer-to-peer (P2P) network, whereby each node would be able to resolve domain names without the need to contact the root DNS servers controlled by ICANN. The primary objective is to eliminate government control over the root domain servers. This has the potential to be a disruptive force and increase exposure to threats.

How can I prevent it?
P2P DNS does not yet exist. However, it is something we must be prepared to address. DNS resolution is a powerful security control that relies on trust in ICANN. Many corporations, ISPs and security products use DNS filters to protect against unauthorized content. Control over which DNS services are used can be aided through egress filtering and host level policy.

–

Don DeBolt

A young woman with a smartphone walks past a billboard advertisement for YouTube.

Threat Management

Majority of YouTube accounts Google terminated in Q3 linked to China

Steve ZurierAugust 29, 2022

While some of the 1,546 YouTube channels terminated by Google emanated from Russia, the vast majority blocked were linked to China.

Content

DevSecOps Scanning Challenges & Tips

Bill BrennerOctober 26, 2021

There are many ways to do DevSecOps, and each organization — each security team, even — uses a different approach. Questions such as how many environments you have and the frequency of deployment of those environments are important in understanding how to integrate a security scanner into your DevSecOps machinery. The ultimate goal is speed […]

Content

It Should Be ‘Cybersecurity Culture Month’

Bill BrennerOctober 19, 2021

It’s Cybersecurity Awareness Month, but security awareness is about much more than just dedicating a month to a few activities. Security awareness is a journey, requiring motivation along the way. And culture. Especially culture.That’s the point Proofpoint Cybersecurity Evangelist Brian Reed drove home in a recent appearance on Business Security Weekly.“If your security awareness program […]

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news