DNS is one of the fundamental protocols that make the Internet work, helping to define a path from a web request source to its intended destination. While DNS is a common attack target and a valuable tool for cybercriminals, it can also be used as an effective source of intelligence to uncover these attacks. The NCSC Active Cyber Defence (ACD) seeks to reduce the harm from commodity cyber attacks by providing tools and services that protect from a range of attacks - one key example being the Protective DNS Service (PDNS). 
 
Since its establishment seven years ago, PDNS has resolved over 2.5 trillion DNS queries and prevented access to 1.5 million malicious domains. Today, PDNS effectively protects over 1,400 UK organisations in central government, local government, healthcare, emergency services, and beyond, preventing average annual losses of at least £59M. 
 
Implementing protective DNS enables public sector organisations to proactively manage threats aligned to the ethos and requirements of the Cyber Security and Resilience Bill and the Cyber Assessment Framework (CAF). 
 
In this interactive workshop led by Cloudflare and Accenture we’ll uncover; 
1. An understanding of DNS telemetry  
2. Using DNS (and therefore PDNS) as part of a cyber defence strategy 
3. Making DNS resilient against DDoS attacks with a DDoS attack simulation exercise