Re:Two top Equifax execs to retire after security breach
by viraptor on Friday September 15, 2017 @07:24PM
(#15261681)
Almost everything stupid here has been addressed, but I'll just add:
> Even if your firewall is great, you can still smuggle data out of a network using DNS alone.
That's why large enterprises have internal networks with no external access. Also why many security/network teams monitor the changes in volume as well as profile of traffic like DNS. You should be doing that anyway, because it allows trivial spotting of malware contacting CC servers.
> Even if your firewall is great, you can still smuggle data out of a network using DNS alone.
That's why large enterprises have internal networks with no external access. Also why many security/network teams monitor the changes in volume as well as profile of traffic like DNS. You should be doing that anyway, because it allows trivial spotting of malware contacting CC servers.