DNS is part of the foundation of the Internet. It lets humans set up connections and interactions between machines when surfing the web, sending tweets and snaps, paying out money via Venmo and Patreon, online gaming, streaming media, and all other Internet activity seen and unseen. But for all its importance, DNS can be incredibly fragile.
Servers and hosts are still vulnerable to spoofing attacks and misdirections and denial of service. In fact, just recently, a new DNS cache poisoning attack was announced (along with a patch and defensive mitigations). DNS is constantly used by bad guys to carry out attacks, orchestrate C2 (command and control), and exfiltrate data. This talk will give an overview of DNS, DNSSEC, and the new protocols of DOH and DOT that may add security and privacy. Then we will talk about how DNS can be used maliciously and how defenders can protect their networks, their data, and their users.
Speaker Bio
Craig Bowser @reswob10, Federal Director – Data Analytics, GuidePoint Security
Craig Bowser is an Infosec professional with over 20 years of experience in the field. He teaches SEC555 for SANS. He has worked as an Information Security Manager, Security Engineer, Security Analyst and Information System Security Officer in DoD, DOJ and Dept of Energy areas and is currently a Director of Data Analytics at GuidePoint Security. He has some letters that mean something to HR departments. He is a Christian, Father, Husband, Geek, Scout Leader who enjoys woodworking, sci-fi fantasy, home
networking, tinkering with electronics, reading, and hiking. And he has a to do list that is longer than the to do slots that are open.
SANS Cyber Camp for Teens is a FREE event for teens to learn cybersecurity topics and trends from the leading experts in the industry! If you're interested in a career in cyber security and you attend high school or junior high, these videos are for you! The camp brings together a group of cyber security experts, discussing the latest topics and trends in IT Security.
#newtocyber #cybercamp #gettingstartedincybersecurity #DNS #domainnamesystem
