Exploring the risk landscape for DDI (DNS, DHCP & IPAM)
DDI is central to an organisation’s IT services and so is crucial to its security posture. However, it often lacks protection from traditional cyber defences as many organisations don’t realise that DNS, a core element of DDI, is a key threat vector.
What is DDI?
DDI represents three automated network solutions that underpin the operation and management of all IT and business networks. These are:
- Domain Name System (DNS)
- Dynamic Host Configuration Protocol (DHCP)
- IP Address Management (IPAM)
These solutions are critical for underpinning network infrastructures, as well as improving previously manual processes and reducing the associated business costs through the efficiencies of automation. Having automated DDI solutions in place also helps to reduce error rates and makes the process of wider system integration much simpler.
The importance of DDI security
While DDI represents three network solutions that should be protected, it is particularly important to place effective security safeguards on DNS.
DNS is especially important as it used by almost every device connecting to networks, with the rise of cloud and the Internet of Things (IoT) increasing the scope of its use significantly. Despite this, DNS is often overlooked as an area for investment, leaving it vulnerable to attacks.
Current threats to DNS
The combination of network significance and under-resourced processes means that DNS is an easy target with a high value for cyber criminals. Without adequate protections in place, DNS can be used to attack infrastructure and services, leading to monetary losses, data exfiltration, website takedowns and, ultimately, damage to brand reputation.
The top five DNS attacks to look out for are:
NCC Group was acknowledged as a major player in the global DDI market in a report by Transparency Market Research (TMR) in 2017, alongside companies including BlueCat Networks, Cisco, Infoblox and Microsoft. Through a vendor-agnostic approach, NCC Group offers tailored DDI solutions to organisations of all sizes, supporting at every stage from initial consultation to final implementation.
Published date:  27 February 2018
Written by:  Graham McElroy