Network fundamentals are core to Cybersecurity

The pandemic has bought in a new work culture and due to this ransomware attacks have become even more pervasive - and effective during the course of this year.

Using existing network tools to fine tune things like the domain name system (DNS), email authentication, and routing may not be entertaining work, but it makes a big difference to the effectiveness of users’ cybersecurity.

According to Geoff Huston, chief scientist at the Asia-Pacific Network Information Centre (APNIC), failing to secure DNS with DNSSEC is savage ignorance.

Huston calls BGP, the internet's fundamental routing protocol, a screaming car wreck with "phenomenal insecurity". Ask your ISP whether they've secured their routing with RPKI-based BGP Origin Validation, for example, because too few regional operators are using it.

Finally, email domains should be secured against spam and address spoofing with SPF, DKIM, and DMARC.