Neustar Security Services has launched UltraDDR (DNS Detection and Response), a recursive DNS-based protection service that aims to combat network breaches, ransomware attacks, phishing, and supply chain compromises while enforcing enterprise-acceptable use policies for its users. UltraDDR offers a Protective DNS solution that allows businesses to get ahead of threats by blocking communication before damage occurs. Protective DNS examines DNS queries and responds to threats.
Carlos Morales, SVP of solutions at Neustar Security Services commented, “C-suites live in fear of becoming victimized by ransomware or a widespread data breach as the frequency of attacks is higher than ever while attackers are routinely exploiting businesses’ weakest security link – their people.
You may not be able to prevent one of your users from clicking on or opening something nefarious, but you can use protective DNS as a means of preventing outbound connections from infected hosts, nullifying the threat before it gets started. UltraDDR’s real-time detection and response capabilities can help prevent user actions from becoming an enterprise’s biggest security blind spot.”
UltraDDR provides real-time observability of outbound network communication by leveraging years of historical domain data, allowing enterprises to detect and stop malware, ransomware, phishing, and supply chain attacks before they cause harm.
If a user is compromised, UltraDDR blocks that user’s outbound internet connections, preventing the infected device from remotely loading malware or taking any actions that would further compromise your infrastructure.
UltraDDR not only monitors, analyzes, and blocks suspicious communications, but it also maps attacker assets and behaviors, providing detailed insight into the overall threat. UltraDDR alerts can be correlated with EDR and NDR alerts to reduce noise and distraction from false positives, allowing security teams to focus on real threats.
UltraDDR can be deployed in minutes to enhance an organization’s existing security investments, such as by integrating always-on DNS intelligence into security information and event management systems, firewalls, endpoint solutions, and other systems.
The solution includes a client that can be installed on Windows, macOS, iOS, and Android devices and allows DNS settings to persist regardless of network connection, allowing it to continue to provide web categorization as well as threat prevention.
