Using DNS to Identify, Mitigate, and Prevent Infections

Tuesday, April 16 | 11:30AM–12:15PM | Gateway III
Session Type: Professional Development
Most of our environments demand that we support almost every type of end-user device available (tablets, laptops, phones, Internet TVs, and more). One of the few commonalities among all these devices is their use of DNS. Through the use of passive DNS logging and DNS sinkholes we have another tool at our disposal to help identify compromises on any device and, in many cases, to even stop drive-by infections from ever occurring.


  • Kevin Wilcox

    Information Security Specialist, Appalachian State University