#USA #Ann Arbor #Censys #Internet Map #DNS Intelligence

Censys Enhances Internet Map with DNS Intelligence

In a significant advancement for internet security, Censys, a recognized authority in internet intelligence, has introduced real-time DNS visibility into its Internet Map. This groundbreaking update allows security teams to have a comprehensive view of the internet infrastructure associated with every potential threat. By integrating active DNS data, analysts can now efficiently navigate the complex web of domains, names, and underlying infrastructures using a single coherent platform.

The Integration of Active DNS Data

With this upgrade, the Censys platform now consolidates information about domains, DNS records, IP addresses, hosts, services, and certificates into one unified view. This development allows analysts to better understand connections between names and internet infrastructure. Instead of viewing DNS as a separate dataset, Censys promotes an integrated approach that facilitates smooth transitions between name-based and IP-based investigations, enabling professionals to track how internet infrastructures have evolved over time.

Enhanced Decision-Making Process

The introduction of DNS data into the Internet Map leads to more rapid and accurate security decisions through all phases of security operations. The new capabilities allow teams to:

1. Triage: Quickly validate suspicious domains by gaining immediate insights into the corresponding internet infrastructure, aiding analysts in escalating potential threats where necessary.
2. Investigate: Seamlessly transition between various data points—domains, IP addresses, hosts, services, certificates, and historical infrastructure relationships—giving a comprehensive understanding of incidents.
3. Hunt: Start investigations from a single indicator and expand to unveil the broader adversary infrastructure, exploring the entirety of an attacker’s online footprint.
4. Defend: Identify campaign infrastructure behind threats, thereby fortifying defenses proactively before actual attacks occur.

Proactive Defense Against Phishing Campaigns

Censys’s new DNS functionalities have already proven beneficial, enabling users to identify and disrupt phishing campaigns at the infrastructure level. For instance, during a recent inquiry into a USPS-themed attack, a single malicious domain led to the discovery of hundreds of associated phishing sites and the larger critical infrastructure involved. This capability shifted the defensive focus from merely reacting to individual indicators towards understanding and dismantling broader campaigns before they could escalate.

Raj Sivasankar, Senior Director of Product Management at Censys, emphasized the importance of this innovative approach, stating, "Security teams make critical decisions every day using fragmented external intelligence gathered from multiple tools. By integrating DNS into the Censys Internet Map, we provide a unified platform that enhances comprehension of the internet infrastructure connected to various threats. This empowers teams to make better security decisions and unveil broader adversary campaigns in an era where attacks are becoming increasingly automated."

About Censys

Censys stands at the forefront of internet intelligence and insights. It delivers one of the most comprehensive and up-to-date global maps of internet infrastructure. This platform is trusted by global governments, Fortune 500 companies, and security providers to accelerate the identification of risks, streamline threat investigations, and prevent breaches before they can occur. For further details about their offerings, please visit censys.com.