DNS and Attack Surface Management
2024-06-08, 14:00–14:45, Track 1 (UC Conference Rm A)

Your company has total control over your DNS records and systems exposed to the Internet. Tightly managing these resources will protect your brand and your systems.


How often does your company examine your externally exposed systems and the ports in use, not just for vulnerabilities but with a critical eye to determine if the service is still needed? Do you have an old A or CNAME record in DNS pointing to resources or domains that do not exist anymore? If you say no, please look again. DMARC is no longer optional, embrace the protection it provides.

This is a practical discussion of steps you should take to examine and secure the Internet facing systems and records of your companies exposed resources. CAA, SPF, DKIM, DMARC, CNAME and TXT DNS records will be discussed as well as how to get free vulnerability and posture assessments! Finally, do you have BIMI setup to show that your brand is protected?

Paul Guido has over 25 years of experience working with financial institutions, keeping their employees, customers, and data safe.