OneDNS: Building the first line of defense for enterprises with SaaS-based DNS security services

With the increase in remote office and branch office scenarios, and the adoption of new technologies such as cloud computing, the attack surface exposed to hackers by enterprises has greatly increased, and network security faces new challenges.

In the field of enterprise security, DNS has been neglected for a long time. However, judging from the data and practice in recent years, more and more enterprises are starting with DNS to "make up lessons" for security construction. The reason is that 91.3% of malware relies on DNS communication to take effect. Starting with DNS resolution, combining DNS with threat intelligence, and intercepting access to malicious remote control domain names, security capabilities can be built in a new dimension. By simply changing the domain name resolution point for external access, enterprises can quickly build a new security line of defense. The DNS security solution provided in SaaS mode is quick to deploy and quick to achieve results. It can help enterprises build the first line of security defense and, in combination with other common security solutions, build a more three-dimensional security protection system for enterprise networks.

Enterprises are paying more attention to DNS security

A market study in 2020 showed that the domestic DNS security market will maintain a compound growth rate of 9.2% from 2020 to 2025. With the popularity of remote work and the adoption of emerging technologies such as cloud computing and the Internet of Things, this growth rate will continue to increase. Globally, companies are also becoming more aware of DNS attacks. The 2020 Global DNS Threat Report mentioned that 77% of respondents believe that DNS security is an important part of their network architecture, compared to only 64% in the previous year.

Huang Yafang, head of the OneDNS business and pre-sales team at Weibu Online, has also seen changes in the Chinese market over the past few years. She said that when she was discussing DNS security solutions with corporate users a few years ago, many companies did not see its value. But now, users have high expectations for DNS security solutions and hope to use DNS services to improve the security business level of their companies.

Taking DNS technology as the starting point, DNS security can add many security capabilities. Taking the OneDNS Enterprise Edition of Weibu Online as an example, it can help enterprises protect against various threats including APT attacks, botnets, worms, Trojans, ransomware, adware, phishing websites, malware, and mining pools.

From Huang Yafang's introduction, we learned that some large domestic companies including financial securities companies, some real estate companies with large branches, and some government department users have discovered many previously invisible threats after using the OneDNS commercial version service, and have also experienced the advantages in Internet behavior management and unified and efficient management.

After deploying OneDNS, a real estate company soon discovered that at least four types of Trojans had been lurking in the office network. These Trojans were able to gain control of the host and steal sensitive information. Some Trojans would connect back to the mining pool, consuming a large amount of server resources. Since many Trojans are extremely hidden, they are difficult to detect using traditional methods.

OneDNS has certain integration capabilities, and after access, it can complement the existing terminal antivirus software. In subsequent use, OneDNS intercepted malicious remote control addresses 233 times, not only blocking the Trojan's external connection behavior, but also realizing the precise positioning of the alarm IP, which greatly facilitated the security personnel of the real estate company to carry out subsequent disposal work. As a new generation of security service, OneDNS establishes protection capabilities at the DNS level in a SaaS manner. It is not only easy to deploy, but also low-cost. It can efficiently and quickly cover enterprise-related Internet devices without changing the network topology. Whether it is within the enterprise or remote office, the SaaS service operation and maintenance cost is low, and the management efficiency of the unified management platform is very high.

For enterprise users, under the lightweight access method of the SaaS model, users only need to register an account and complete the evaluation experience with simple configuration, which greatly reduces the cost of trial and error. Users can quickly move from the test and verification stage to the actual use stage. The applicability of the SaaS-based DNS security solution is very wide, which provides the possibility for rapid market growth.

With the emergence of enterprise-level DNS, how can enterprises make the right choice?

Nowadays, there are many enterprise-level DNS services with added security capabilities in the security market. In the foreign market, there are many related manufacturers such as Cisco's Umbrella (the commercial version of OpenDNS), Infoblox, NS1, etc. There are also more and more domestic DNS security manufacturers. Faced with more and more enterprise-level DNS manufacturers, how should users make choices?

First of all, you must choose a licensed, qualified, formal and legal enterprise-level DNS service provider that meets the security requirements of industry regulators, including data storage solutions, guarantee mechanisms and other aspects that must be able to meet the requirements of relevant laws and regulatory authorities.

Secondly, you need to choose a DNS service that can operate stably. As mentioned above, many DNS services are backed by technically strong manufacturers to ensure their smooth operation. If they are not large comprehensive companies, they are usually professional manufacturers with strong security capabilities.

Third, to have the ability and experience of enterprise-oriented security services, one needs to truly understand the needs and pain points of enterprise users and truly help enterprises solve security problems. To achieve this, it usually takes a long period of market practice to be verified. In addition, as a security segment, secure DNS usually relies heavily on threat intelligence capabilities. The most famous foreign Umbrella and China's OneDNS are both inseparable from the support of threat intelligence.

WeiBu Online's OneDNS is a SaaS DNS security service for enterprises. It is a formal DNS service that has been operating stably for eight years. It has rich and comprehensive security capabilities and very fast resolution speed. In the eight years since it went online, it has served more than 10 million users and has very rich industry practical experience.

OneDNS of Weibu Online has penetrated into many industries, and OneDNS is becoming the inevitable choice for lightweight security protection in various industries. In the real estate industry, there are many corporate users such as Xuhui Real Estate, Bozhilin, Hongyang Real Estate, and China Overseas Real Estate. In addition, there are many leading corporate users in the industry, such as Guotai Junan Securities, Shandong Branch of China National Tobacco Corporation, China CITIC Bank Corporation, China Export & Credit Insurance Corporation, Gree Electric Appliances, By-Health, and Lei Shing Hong Machinery.

Conclusion

DNS is a concept that is both familiar and unfamiliar to many people. However, for enterprises, it has become a security issue that they have to consider. For many relatively conservative Chinese corporate users, the intuitive value presented by SaaS-based DNS security solutions is more attractive.

The enterprise-level DNS security solution represented by OneDNS is a lightweight solution for various industries. It is a security solution with low investment and high returns. It can help enterprises fill the gaps in security architecture and help enterprises build the first line of defense for enterprise network security. Enterprises should consider how to use such solutions to further improve their security level.