Today, the internet is a tool for navigating the world more easily. It’s also an inseparable part of most people's jobs. The internet helps us find and share information, relax, and understand many topics. But as with many good things, the internet has a dark side.
Bad actors exploit the benefits the online world gives society, and thus, we must protect against such risks. Businesses need to be aware of the threats that lurk on the internet and find ways to battle them.
Domain Name System (DNS) filtering is one of the most effective ways to prevent unwanted content. Companies employ this feature to minimize the potential of online risks. As a side-effect, this even helps improve employee productivity.
NordLayer has researched how their client companies use DNS filtering functionality. For example, organizations tend to block access to manga or underwear websites more than social networks. This report will reveal exciting findings that suggest best practices your company could try out, too. So, let’s go!
The statistics mentioned below were acquired by analyzing aggregated data gathered by NordLayer’s DNS filtering service in February of 2024. No identifiable business or user information was collected, reviewed, or otherwise involved when the research and compiled results were conducted.
Category statistics in the research contain 54 varieties. The report overviews data from the main markets by country and continent.
DNS filtering is like having a selective gatekeeper for your internet browsing.
Imagine you're trying to get to a party (a website) in a big city (the internet). Instead of navigating through complex streets (IP addresses), you tell your driver (the DNS) the party's name (domain name), like NordLayer.com.
Now, imagine some parties aren't safe to attend for various reasons. They might be hosting shady characters (malicious websites) or engaging in activities you'd rather avoid (harmful/inappropriate content).
DNS filtering steps in as a responsible friend who advises you on which parties are safe and match your preferences, blocking the risky ones and guiding you to secure enjoyable destinations.
Or, put it shortly:
DNS filtering is a security method that uses the DNS to block access to harmful or unsuitable-for-work websites. It acts as an internet filter, screening websites against set security policies or categories to prevent exposure to threats like malware or phishing.
For businesses, DNS filtering becomes a powerful tool. Managers can set rules on what types of websites employees can visit during work hours on company-managed networks.
By doing so, they enhance the security of company data and protect employees from stumbling into digital pitfalls like phishing websites. It's a smart way to ensure the online environment is not only productive but also safe from threats lurking around the internet's corners.
DNS filtering helps mitigate the exposure to risks users face while browsing the internet. It includes viruses, spyware and malware, various types of phishing attacks, botnet-escalated threats, and more.
First, let’s overview DNS categories. Grouping these categories will help us better see the tendencies of what types of sites are considered to be malicious or at least avoidable. The goal here is to create clusters that share a common theme or purpose, making it easier to manage preferences or restrictions based on user needs, security protocols, or compliance requirements.
By grouping these categories, we create a framework that aids in designing more nuanced and effective DNS filtering strategies, ensuring a balance between user freedom and network security, compliance, or productivity goals. This approach highlights the diversity of online content and the complexities involved in managing internet access responsibly.
Let’s uncover the digital no-go zones together. From shadowy corners harboring malware to tempting and time-sinking entertainment sites like 9GAG and BuzzFeed, we'll explore the top categories that companies across the globe consistently consider too risky or distracting for open access.
The top 10 DNS-blocked categories offer a revealing glimpse into the primary concerns that motivate organizations to filter internet content. Here’s a breakdown, highlighting what each category suggests about current priorities in network security and content management:
1.Malware (72%): reflects the universal concern for protecting networks and devices from malicious software designed to damage or exploit them.
2.Adult content (72%): indicates efforts to maintain a professional work environment, comply with workplace policies, and possibly avoid legal issues related to inappropriate content access.
In a recent NordVPN study related to the Threat Protection tool, it was discovered that adult content sites hide the biggest amount of malware. Thus, blocking this type of content mitigates a huge risk for businesses.
Read more about the research and explore more interesting findings.
3.Phishing (70%): underlines the emphasis on safeguarding sensitive information against deceitful attempts to obtain it through fraudulent websites.
4.Illegal or unethical (56%): shows the commitment to corporate ethics and legality, blocking access to content that could harm the company's legal standing or moral integrity.
5.Cryptojacking (54%): highlights the growing concern over unauthorized cryptocurrency mining, which can significantly drain network and device resources.
6.DDoS-as-a-Service (51%): reflects awareness of the threat posed by services offering to disrupt networks through Distributed Denial of Service (DDoS) attacks, emphasizing the need for preventive measures.
7-8.Repeatedly infected websites (44%) and Stalkerware (44%): these categories signal an understanding of the ongoing risks associated with websites known for recurrent malware issues and software that covertly monitors users, stressing continuous vigilance.
9.Hacking (43%): points to the necessity of blocking access to sites that could serve as gateways to hacking tools or knowledge, protecting against unauthorized access or data breaches.
10.Gambling (43%): suggests an effort to prevent potential legal and productivity issues related to gambling, which can also be a source of financial fraud and addiction among employees.
These insights highlight a strategic approach to DNS filtering, balancing between defense against security threats, compliance with legal and ethical standards, and the promotion of a focused and safe work environment.
The prevalence of security-related categories (like malware, phishing, and hacking) alongside those aimed at maintaining workplace standards (such as blocking adult content and gambling) shows a comprehensive effort to mitigate risks and support corporate values.
The landscape of DNS blocking reveals a clear prioritization among organizations, with the most blocked categories—malware, adult content, and phishing —highlighting a strong focus on security and maintaining a professional workplace environment.
Despite maintaining a professional environment, the biggest focus remains on blocking cyber-attack-affiliated content. 7 categories in the top 10 are related to malicious activities of a third party. Here’s why it’s so important:
The research suggests that blocking these categories of websites is a critical component of an organization's cybersecurity strategy. It helps safeguard the network, protect sensitive data, and ensure the smooth operation of business processes by mitigating risks before they can manifest.
The percentages of companies blocking various categories provide a fascinating snapshot of the priorities and concerns of modern businesses regarding internet usage. Here's a deeper dive into what these figures might reveal:
These trends recognize the evolving role of technology and the internet in the professional landscape while safeguarding company assets and fostering a focused work environment.
Despite various available DNS categories, companies block 10 different types of online content on average. In Asia, we see a more restrictive approach than in Europe and North America. Each region adapts its approach to DNS filtering to meet its unique challenges and objectives best.
The variance in DNS categories blocked between companies in Europe and North America versus Asia likely boils down to four main factors:
Looking at North American, European, and Asian markets, we can see that Western regions equally consider malware as their top priority for blocking, while Eastern regions prioritize blocking illegal or unethical content. Adult content like pornography sites and explicit content is the overall second pick, with Europe leading the group.
The approach to blocking DNS categories varies across North America, Europe, and Asia, reflecting each region's unique cybersecurity landscape and cultural nuances.
Malicious websites are a top concern worldwide, with North America leading slightly in terms of proactive blocking measures. This consensus underscores a global recognition of the threats posed by malicious sites, with regional adjustments based on specific cyber landscapes and regulations.
The handling of adult content varies, with Europe's slightly higher blocking rate likely indicative of its stringent content regulations. North America and Asia also prioritize this category, revealing a common aim to maintain a secure online environment.
Phishing attacks are universally combated, showcasing the necessity of robust defenses against this widespread threat. North America's marginally higher blocking rate highlights the persistent challenge phishing poses across regions.
Asia stands out for its markedly higher blocking of illegal/unethical content and services like DDoS-as-a-Service and gambling, reflecting its strict legal and cultural frameworks. The lack of emphasis on hacking in Europe suggests a different focus or reliance on alternative defensive tactics.
Stalkerware and repeatedly infected sites show varied attention, pointing to regional differences in perceived threat levels.Europe's unique focus on drugs aligns with its specific policies, while Asia's concern for cryptocurrencies and dating sites highlights regional security and social considerations.
DNS filtering serves three pivotal roles in managing online interactions: security, compliance, and productivity. Each role focuses on a distinct goal, but all link to the idea of controlling access to certain types of online content.
At its core, DNS filtering is about keeping users safe from harmful content. This includes blocking access to websites known for phishing, malware distribution, or those hosting adult content unsuitable for all audiences.
The aim is straightforward: to protect users from threats that could compromise their personal information and device integrity or expose them to inappropriate content. DNS filtering acts as a first line of defense against numerous online security threats by preventing access to these sites.
Compliance takes the security concept a step further by enforcing specific regulatory or policy requirements. This might involve blocking access to illegal download sites to comply with copyright laws or restricting gambling sites to adhere to corporate policies or legal frameworks.
DNS filtering for compliance ensures that the organization and its users operate within the bounds of legal and ethical standards, thereby protecting the organization from legal issues and maintaining its reputation.
The third pillar focuses on enhancing productivity by limiting access to websites unrelated to work or the task at hand. This includes social media platforms, video streaming sites, and other distracting websites that can significantly reduce productivity to stay focused.
By restricting access to these sites during work hours, DNS filtering helps organizations ensure that their resources are utilized efficiently and that employees remain focused on their responsibilities.
A critical yet often overlooked aspect of DNS filtering is its role in optimizing network performance and internet speed. This optimization process involves restricting access to high-bandwidth websites.
Video streaming services, file-sharing platforms, and large-scale download sites can significantly consume excessive amounts of internet bandwidth. When left unchecked, these activities can greatly degrade network speeds, impacting the individual's productivity and overall organizational efficiency.
Each direction serves a specific purpose, yet they all share the common goal of optimizing the online environment according to the organization's needs.
Choosing NordLayer's DNS filtering service offers organizations a suite of powerful benefits designed to enhance their network security, improve productivity, and ensure a safer online environment for all users.
Here's why NordLayer stands out as a preferred option for DNS filtering:
NordLayer's DNS filtering service offers a comprehensive solution that addresses key organizational needs—from security and productivity to compliance and ease of management.
To keep up with the pace of the evolving internet pitfalls, NordLayer will soon introduce DNS filtering powered by machine learning. What does it mean? Our patented technology makes DNS filtering dynamic. It means that the database is constantly growing, learning, and updating itself.
Its blend of advanced features, customization options, and reliable performance makes it an ideal choice for businesses looking to strengthen their network security and operational efficiency.
Already have NordLayer but didn’t enable the content filtering feature? Here’s how to do it:
In the request form, select which categories you want to filter. With NordLayer, you can currently choose from 53 DNS categories to block (find the list below).
Once you’re done, click on Request DNS Filtering by Category. Please allow up to 24 hours for the feature to be enabled. You will get an email with the confirmation once it’s ready.
Agnė Srėbaliūtė
Senior Creative Copywriter
Agne is a writer with over 15 years of experience in PR, SEO, and creative writing. With a love for playing with words and meanings, she creates unique content. Introverted and often lost in thought, Agne balances her passion for the tech world with hiking adventures across various countries. She appreciates the IT field for its endless learning opportunities.
Subscribe to our blog updates for in-depth perspectives on cybersecurity.
