Home / News

Use of DNS Firewalls Could Have Prevented More Than $10B in Data Breach Losses Over the Past 5 Years

New research from the Global Cyber Alliance (GCA) released on Wednesday reports that the use of freely available DNS firewalls could prevent 33% of cybersecurity data breaches from occurring. The study also indicates that DNS firewalls might have prevented conservatively $10 billion in data breach losses over from the 11,079 incidents in the past five years. (data showed 3,668 breaches involved at least one of the threat actions which would have been potentially mitigated by a DNS firewall.)

And there’s more: Report also makes a reference to the spring of 2018 when the Council of Economic Advisors released a report estimating that ‘malicious cyber activity cost the U.S. economy between $57 billion and $109 billion in 2016.’ Also in 2018, McAfee and the Center for Strategic and International Studies estimated that global losses from cybercrime are between $445 billion and $600 billion. Hence, researchers point out that since their data shows that a DNS Firewall could play a role in preventing one-third of breaches, “it is likely it could have played a role in one-third of these losses to the extent that they arise from breaches and not denial-of-service or other non-breach attacks.” That would be additional prevention of $19 and $37 billion in the U.S. or globally between $150 and $200 billion.

Advice for individuals: It is worth using a DNS firewall, says Global Cyber Alliance. GCA in collaboration with IBM and the Packet Clearing House in 2017 launched Quad9, a free DNS security service that blocks known malicious domains, preventing computers and IoT devices from connecting to malware or phishing sites.

By CircleID Reporter

CircleID’s internal staff reporting on news tips and developing stories. Do you have information the professional Internet community should be aware of? Contact us.

Visit Page

Filed Under


Comment Title:

  Notify me of follow-up comments

We encourage you to post comments and engage in discussions that advance this post through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can report it using the link at the end of each comment. Views expressed in the comments do not represent those of CircleID. For more information on our comment policy, see Codes of Conduct.

CircleID Newsletter The Weekly Wrap

More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.

I make a point of reading CircleID. There is no getting around the utility of knowing what thoughtful people are thinking and saying about our industry.

Co-designer of the TCP/IP Protocols & the Architecture of the Internet



IPv4 Markets

Sponsored byIPv4.Global

Domain Names

Sponsored byVerisign


Sponsored byDNIB.com

Brand Protection

Sponsored byCSC

New TLDs

Sponsored byRadix


Sponsored byVerisign

Threat Intelligence

Sponsored byWhoisXML API