mobile security - Federal News Network

Listen Live

cybersecurity

Cybersecurity

CISA aims to expand cyber defense service across fed agencies, potentially further

CISA's new Protective DNS service will help defend agencies from a wide variety of cyber attacks, and the lead architect on the program wants to offer the capability to other enterprises.

Cybersecurity

CISA updating cyber programs to align with White House zero trust strategy

Cybersecurity

Agencies get new guidance for securing mobile devices on international travel

Cybersecurity

Exclusive Agencies have new services on tap for securing mobile devices

Federal Insights

Who says mobile devices need protecting? FISMA, NIST and the DoD for starters.
Insight by Zimperium

Federal Insights

What is the Achilles heel of O365 Security?
Insight by Zimperium

Federal Insights

How to secure mobile devices in the age of mass teleworking
Insight by Lookout

Head shot of Bob Stevens

Federal Tech Talk

Mobile security in the age of COVID-19

Executive Briefing CDM and Mobile Security cover

Analysis

Insight by MobileIron Executive Briefing Series: CDM and Mobile Security

Close-up shot of female hands holding smartphone with closed padlock on display, surface of wooden table on background

Federal Insights

Insight by MobileIron The integration of mobile devices, CDM to reduce cyber risks

Analysis

Insight by Lookout Executive Briefing Series: Mobile Security

Executive Briefing Mobile Cyber Security cover

Analysis

Insight by MobileIron Executive Briefing Series: Mobile Cyber Security

WoW_VijayaKaza

Women of Washington

Ask for forgiveness, not permission

DHS CDM

Cybersecurity

DHS putting the pedal to the metal for one of its major cyber programs

Men dress up lifestyle hold smartphone screen shows the key in the Security online world. the display and technology advances in communications. The concept of advancement in living in the future.

Federal Insights

Insight by Lookout Understand the mobile cyber threat and how to mitigate it

Federal Drive

David Choffnes: Protecting personal information on connected devices

Vincent Sritapan Photo (1)

Federal Drive

Vincent Sritapan: DHS takes deep dive into mobile security

Two businessmen using computer in server room

Technology

HHS to stand up its own version of the NCCIC for health

Man using mobile payments, holding circle global and icon customer network connection, Omni Channel

Federal Insights

Federal CIO Insights: What’s Next in Mobile Security

Protect your mobile phone. 3d render and computer generated image.

Technology

Solution to slow mobile technology acquisition could lie in classification

joshua-franklin

Federal Insights

The Framework for Mobile Security in Government

[hbidcpodcast podcastid='4280690']

<em>Best listening experience is on Chrome, Firefox or Safari. Subscribe to Federal Drive’s daily audio interviews on </em><a href="https://itunes.apple.com/us/podcast/federal-drive-with-tom-temin/id1270799277?mt=2"><em>Apple Podcast</em>s</a><em> or <a href="https://www.podcastone.com/federal-drive-with-tom-temin?pid=1753589">PodcastOne</a>.</em>

The Cybersecurity and Infrastructure Security Agency is rolling out a new service to help defend a wider range of agency systems from cyber attacks, and CISA is looking to potentially expand the tool beyond federal systems, according to an agency official leading the effort.

CISA is rolling out a Protective Domain Name System (DNS) service to all federal agencies after spending the last year beta testing the tool.

DNS is essentially a phonebook for the Internet, facilitating web communication by translating domain names into IP addresses. CISA's Protective DNS service sits between agency networks and the rest of the Internet, resolving DNS queries and blocking those that seek to access known malicious IP addresses, according to Branko Bokan, lead architect for Protective DNS at CISA.

The goal is to scale it across federal agencies and potentially even further, Branko said in an interview.

“When we originally designed this service, we designed it in mind of the need to scale it to serve the biggest enterprise,” he said. “We would really like to be able to offer this service not just to the federal enterprise, not just the federal civilian executive branch agencies, but to other levels of U.S. governments that might be interested in same type of protection.”

The prime contractor for the new Protective DNS is Accenture Federal Services, which developed the user interface. The DNS resolver is provided through Cloudflare, one of the biggest commercial DNS providers in the world.

“This is a very reliable, very distributed, high availability service that also is capable of scaling and supporting a very large number of organizations with a very large number of users,” Bokan said. “And we are already experiencing that we are already seeing numbers of DNS queries that are in the billions.”

Matt Hayden, the former assistant secretary of Homeland Security for cyber, infrastructure, risk and resilience policy, said Protective DNS is a crucial capability in a world in which DNS is used as an attack vector in a wide variety of cyber incidents ranging from ransomware to Distributed Denial of Service attacks. Hayden is now vice president of cyber client engagement at General Dynamics Information Technology (GDIT).

“If I get a phishing email, and I get a link that looks real, but it's spoofed to point me to a bad part of the Internet that's going to trick me into logging into a website that harvests my credentials and then uses that back against me? It's going to nip that in the bud,” Hayden said.
<h2>Expanding to mobile, cloud</h2>
The new DNS resolver replaces the DNS sinkholing service provided through CISA’s EINSTEIN program. The previous service was limited to agencies’ on premise networks. The new one covers roaming and mobile devices, as well as cloud-based assets, according to Bokan.

“A lot of federal technologies are no longer behind those on-premise networks, behind firewalls,” he said. “They're now all over the Internet, in the cloud, but also we see a large number of what we call roaming and nomadic devices and mobile devices that federal users, both employees and contractors, are using to access federal resources.”

He said agencies that are using Secure Access Service Edge solutions, for example, by “changing a few configuration settings, route their DNS traffic to Protective DNS and then immediately satisfy not only requirements to route the traffic through Protective DNS, but also satisfy some of the requirements for the from the federal zero trust strategy.”

Bokan said the new service also features commercial threat intelligence about malicious IP addresses. The previous EINSTEIN sinkholing service was limited to the government’s own threat information, according to Bokan.

“We're bringing these vast amount of commercial indicators through commercial threat intelligence feeds, that in terms of the numbers, they by far outweigh what we are capable of producing on the proprietary side,” he said. “And that allows us to provide much better protection to federal agencies.”

Beyond resolving DNS queries, CISA is also logging the requests and storing them in a “data lake,” Bokan said. That will allow the agency to analyze threat trends and provide agencies with much sought-after “visibility” into DNS traffic logs. Bokan said the traffic logs will be stored for up to three years.

“We can go back and we can do analysis after the incident to determine whether there was malicious activity taking place before we even knew about these malicious indicators,” he said. “And we can also now analyze this huge amount of data and look for trends to try to make future predictions and block malicious events, even before they happen.”
<h2>Beyond federal agencies</h2>
The Protective DNS service is currently limited to federal agencies. But Bokan said CISA is looking at how it could provide the service beyond the federal enterprise.

“We would be very interested and very happy to offer this service and the same level of protection that we now offer to federal agencies to other levels of U.S. governments and just beyond government, any interested party,” Bokan said.

The natural next step for expanding CISA’s Protective DNS service are state and local governments, according to Hayden. CISA <a href="https://home.dotgov.gov/2021/3/8/moving-to-cisa/">took over policy and management authority</a> for the .gov top-level domain last year under the DOTGOV Act of 2020.

“I think you're going to find the state and local networks are probably the next closest low hanging fruit to providing this service over a broader area,” Hayden said.

Federal Tech Talk

Understanding satellite technology

On DoD Podcasts

Next step for DoD cybersecurity: Ditch passwords once and for all