{"id":11626,"date":"2025-05-15T10:54:23","date_gmt":"2025-05-15T17:54:23","guid":{"rendered":"https:\/\/blogs.infoblox.com\/?p=11626"},"modified":"2025-05-15T10:56:42","modified_gmt":"2025-05-15T17:56:42","slug":"blocking-shadow-ai-using-protective-dns-simple-yet-powerful","status":"publish","type":"post","link":"https:\/\/www.infoblox.com\/blog\/security\/blocking-shadow-ai-using-protective-dns-simple-yet-powerful\/","title":{"rendered":"Blocking Shadow AI Using Protective DNS\u2014Simple yet Powerful"},"content":{"rendered":"

Generative AI applications have exploded in usage by organizations in the last two years. More than 100 million users<\/strong> are now experimenting and using AI applications. But, as with any new tool, the adoption of GenAI by enterprises introduces unique risks in areas such as security, privacy, legal, safety and organizational reputation. More specifically, risks include the potential exposure of users to malicious domains and confidential data leakage from the use of shadow AI applications. <\/p>\n

Organizations must adopt policies, tools and frameworks to manage these risks effectively. This includes implementing preemptive cyber defense approaches that go beyond detection and response, identifying and blocking unsanctioned AI usage and implementing other security best practices. <\/p>\n

The Problem of Shadow AI<\/h3>\n

\u202f
\nThe problem of shadow AI is impacting almost every organization. A recent study by Software AG<\/strong><\/a> reveals that approximately 50 percent of employees in companies are using unapproved AI tools, often referred to as \u201cShadow AI,\u201d to enhance their work efficiency. Despite potential security risks and corporate policies that prohibit the use of unsanctioned AI applications, employees continue to use these tools because of easy availability and the very positive impact these tools have on their productivity. Due to the fear of reprimands, many employees avoid disclosing their use of shadow AI applications. This results in IT teams not having visibility into AI applications that employees use and the potential risks that come with it. <\/p>\n

According to Harmonic<\/strong><\/a>, companies averaged 254 AI applications and 45.4 percent of sensitive data submissions came from employees\u2019 personal accounts, such as Gmail. With such widespread use of AI, most of which is unmanaged \u201cShadow AI,\u201d there are significant risks, which include involuntary exposure of personally identifiable information (PII), such as customer data and employee data, as well as legal and financial data, intellectual property and sensitive code. <\/p>\n

The findings underscore the need for organizations to develop proactive strategies to address unsanctioned AI usage. This includes creating policies that balance security concerns with the productivity benefits that these tools offer and integrating approved alternatives that could be more beneficial for both employees and the organization.<\/p>\n

Identifying and Blocking Unsanctioned AI Using DNS<\/h3>\n

In addition to implementing baseline security measures for use of GenAI applications, organizations should use effective strategies to gain visibility into use of AI applications and block or redirect shadow GenAI usage to avoid breaches.<\/p>\n

One such simple yet powerful method is to use a Protective DNS solution that can identify when users are accessing unsanctioned AI applications based on their DNS activity. You can then either block that access or redirect them to a corporate sanctioned GenAI application, again using DNS.<\/p>\n

Infoblox Threat Defense\u2122<\/strong><\/a> is an industry-leading Protective DNS solution that:<\/p>\n