Dynamically learning DNS blocker stops threats in real time before they reach the network. ProSoft presents Blue Shield Umbrella: The world's first AI-based whitelist DNS filter.
The Domain Name System (DNS) makes the Internet really usable for users. DNS converts website calls into IP addresses and forwards user requests to the target server. But: DNS is not encrypted and therefore a potential weak point for every computer and thus every company network.
Unencrypted DNS is vulnerable
There is a high risk potential, for example, from the intrusion of malware and zero-day malicious code, but also from fake websites for man-in-the-middle attacks, phishing and pharming attacks. With around 200.000 new domains registered every day, 70% of which can be regarded as potentially dangerous, classic blacklist filtering no longer offers reliable protection. ProSoft offers the solution with the Blue Shield Umbrella whitelist DNS filter, which was developed in 2013. This recognizes dangerous websites and blocks them before malicious code can get into your own network. The newly integrated artificial intelligence (AI) and the specially developed sandbox environment make Blue Shield Umbrella the world's first AI-based DNS whitelist filter.
Blue Shield Umbrella: Accurate and intelligent
The check that runs in the background based on algorithms is so accurate that, for example, so-called evasive malware – i.e. malware that cannot be identified by conventional signature-based antivirus solutions due to sophisticated camouflage techniques – is reliably detected. To do this, the software monitors all newly issued SSL certificates worldwide. In addition to algorithms with artificial intelligence and the sandbox, historical data such as code evaluation including all hidden directories, connection behavior and IP and alternative name server reputation are also checked. In the event of changes, websites must always requalify.
Blue Shield Umbrella works purely dynamically and without content categorization according to an “allow/whitelist only” principle, which means that false positives are very rare. By mirroring the root server with all important zones, many questionable domains are already removed by pre-sorting.
Efficiently defended against zero-day attacks
While conventional DNS filters only block known "bad" domains, Blue Shield Umbrella also blocks all newly discovered security vulnerabilities for which there are no patches (zero days) based on the unique behavior-based methodology and the allow/whitelist approach. The rating of a domain is valid for a maximum of five minutes, since the status of "good" and "bad" can change at any time.
Application of the Zero Trust model
In case of doubt, Blue Shield Umbrella's Zero Trust security concept takes effect. All services, users and devices are generally distrusted and new or changed websites are initially blocked until they are checked. “With the Blue Shield Umbrella, companies experience a maximum reduction in the dangers that emanate from the operational use of the Internet. Domains or hosts that are suddenly considered malicious or hacked, distribute malware or operate phishing are quickly recognized and reliably blocked. In this way, potential damage to companies is avoided right from the start,” summarizes Korherr.
More at ProSoft.de
About ProSoft ProSoft was founded in 1989 as a provider of complex software solutions in the large computer environment. Since 1994 the company has focused on network management and IT security solutions for modern, heterogeneous Microsoft Windows infrastructures, including Mac OS, Linux as well as mobile environments and end devices. The experts manage efficient software and hardware for corporations and medium-sized companies and have established themselves as specialists for IT security. In addition, as a value-added distributor (VAD), ProSoft supports manufacturers with the “go-to-market” and the launch of new solutions in the German-speaking part of Europe.