Nominum boosts DNS for security, new services

ISPs are under pressure from regulators and customers to improve the Internet experience, including providing safety from denial of service attacks, limit malware and phishing and segment out objectionable content, Tumuluri said.

Client-based solutions to such problems exist, but even when installed, they are often not properly maintained by individual users. On the network side, deep packet inspection (DPI) boxes can analyze IP traffic in real time – and lay the foundation for similar services. But analyzing domains rather than individual packets is a lower-impact, lower-cost option. “Inspecting all traffic from all threats is impractical and cost-prohibitive,” Tumuluri said, noting more aggressive DNS segregation could work well in tandem with DPI.

The Malicious Domain Redirection module in particular offers ISPs new ways to serve their customers. Upon trying to access a Web page known to host malware or cause other problems, the ISP can redirect users to a service-provider-created information page, delivering a so-called “learning moment” that can not only protect users but educate them, Tumuluri said.