Higher Ed Security Org Uses DNS Database to Track Criminal Action

  • By Dian Schaffhauser
  • 05/26/17

An organization that provides security services to the research and education community at large has gone public with its adoption of a historic DNS database service. The Research and Education Networking Information Sharing and Analysis Center (REN-ISAC) is working with DNSDB, a database with passive DNS data maintained by Farsight Security that enables security teams to view Internet infrastructure as it was at a certain point in the past.

REN-ISAC has two roles. It serves as a computer security incident response team that notifies higher education institutions about infected hosts and suspicious network traffic. The organization also runs a membership service giving colleges and universities access to a "private, vetted community" of information security professionals in research and higher ed. Currently, REN-ISAC has 554 member institutions.

Farsight Security is known for its real-time threat intelligence services. In 2013 it acquired assets of Passive DNS from the Internet Systems Consortium (ISC), including DNSDB. Farsight was founded by two DNS pioneers, including Paul Mockapetris, who, along with Jon Postel, invented the Internet Domain Name System. DNSDB currently maintains an indexed collection of 13 billion domain names. The database is used by security experts to uncover patterns of attacks and investigate how cyber criminals have entered, moved through and discarded related domains, IP addresses and name servers.

"Information security remains a top concern for higher education institutions," said Doug Pearson, REN-ISAC technical director, in a prepared statement. Calling Farsight Passive DNS an "important tool" in his organization's "security arsenal," Pearson added, "Threat actors increasingly are abusing the domain name system to gain a foothold into our member networks. As both a contributor and user of Farsight Security's DNSDB, REN-ISAC believes this technology plays a critical role in rapidly detecting and responding to malicious intent."

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • Training the Next Generation of Space Cybersecurity Experts

    CT asked Scott Shackelford, Indiana University professor of law and director of the Ostrom Workshop Program on Cybersecurity and Internet Governance, about the possible emergence of space cybersecurity as a separate field that would support changing practices and foster future space cybersecurity leaders.

  • modern college building with circuit and brain motifs

    Anthropic Launches Claude for Education

    Anthropic has announced a version of its Claude AI assistant tailored for higher education institutions. Claude for Education "gives academic institutions secure, reliable AI access for their entire community," the company said, to enable colleges and universities to develop and implement AI-enabled approaches across teaching, learning, and administration.

  • AI microchip, a cybersecurity shield with a lock, a dollar coin, and a laptop with financial graphs connected by dotted lines

    Survey: Generative AI Surpasses Cybersecurity in 2025 Tech Budgets

    Global IT leaders are placing bigger bets on generative artificial intelligence than cybersecurity in 2025, according to new research by Amazon Web Services (AWS).

  • university building surrounded by icons for AI, checklists, and data governance

    Improving AI Governance for Stronger University Compliance and Innovation

    AI can generate valuable insights for higher education institutions and it can be used to enhance the teaching process itself. The caveat is that this can only be achieved when universities adopt a strategic and proactive set of data and process management policies for their use of AI.