On Wednesday (5th May) the last of the 13 authoritative root servers for the domain name system switched over to the DNS Security Extensions (DNSSEC) security protocol. DNSSEC is intended to prevent DNS exploits such as cache poisoning. All 13 root servers are now serving a signed version of the root zone. However, it is not possible to validate these signatures at present as the public key remains undisclosed.. This precautionary measure is intended to ensure that for the time being it remains possible to switch back to an unsigned root zone, should the need arise. There have been no reports of any problems in the immediate aftermath of VeriSign's J root server starting to serve DNSSEC signatures. Experts at the 60th RIPE meeting in Prague were almost unanimous in predicting a glitch-free switchover, following the successful switchovers of the other 12 root servers in recent months. The only apocalyptic note was sounded by a countdown to the demise of the unsigned root zone. Yesterday's changeover does mean the .root zone is now dead. VeriSign, which operated the master server for the root zone, has for several years used a single entry under .root, that served the purpose of checking that the bulky root zone had been transferred. According to Jaap Akkerhuis, a DNS expert at nl.netLabs, the creation of the .root entry was prompted by a complete outage of the .com zone following a data transfer error. Rigid DNSSEC procedures render this trick for root servers operated by VeriSign and the Internet Corporation for Assigned Names and Numbers (ICANN) obsolete. The link for this article located at H Security is no longer available. . This precautionary measure is intended to ensure that for the time being it remains possible to swit. wednesday, authoritative, servers, domain, system. . Anthony Pell
Google wants to speed up a key part of the Internet's inner workings called the Domain Name System and is inviting technically savvy folks to try their ideas out. The DNS is a crucial part of the Internet. It converts the text addresses people can remember into the numeric Internet Protocol addresses actually used to locate information on the Internet. For example, CNET.com's IP address is 216.239.122.102.. When you visit a Web page, a DNS server that's part of a vast distributed network often must perform that conversion--called resolving a host--many times. With the Google Public DNS service, Google wants to be that server. "Our research has shown that speed matters to Internet users, so over the past several months our engineers have been working to make improvements to our public DNS resolver to make users' Web-surfing experiences faster, safer, and more reliable," said product manager Prem Ramaswami in a blog post introducing the Google Public DNS service. The link for this article located at CNET is no longer available. . Amazon aims to improve cloud performance globally, offering a distributed network solution to optimize efficiency and user satisfaction.. DNS Optimization, Network Efficiency, Google DNS Service, Internet Infrastructure, Domain Name System. . Anthony Pell
The Domain Name System (DNS) security protocol is finally making inroads on the Internet infrastructure front, but big hurdles remain for widespread, smooth adoption. It has been more than 15 years in the making, but DNSSEC is finally gaining some traction: The .gov and .org top-level domains have begun to adopt the Domain Name Service (DNS) security protocol, and during the past few days, some commercial activity was associated with it.. HP last week announced it will resell Secure64's DNS software, while registrar and managed DNS provider Dynamic Network Services Inc. (Dyn Inc.), announced it has gone live with DNSSEC. DNS product vendor NeuStar, meanwhile, rolled out its own DNS security appliance to protect DNS servers from getting hit with the DNS cache poisoning flaw uncovered last year by researcher Dan Kaminksy. The link for this article located at Dark Reading is no longer available. . The adoption of DNSSEC is on the rise, as .gov and .org domains implement it, with DNS software vendors reporting significant advancements.. DNS Security, DNSSEC Adoption, Security Protocols. . Anthony Pell
More than half of the Internet's name servers are configured incorrectly, leaving networks vulnerable to pharming attacks and enabling servers to be used in attacks that can wipe out DNS infrastructure. This is the key finding of a survey of the Internet's domain name servers released Monday. The Measurement Factory conducted the survey for Infoblox, which sells DNS appliances. Overall, the 2006 DNS Report Card assigned a grade of D+ for DNS security. This is the second annual survey conducted by The Measurement Factory about the state of the global DNS. We saw an increase in the pace and severity of attacks and outages resulting from bad configurations in the DNS infrastructure, says Rick Kagan, vice president of marketing for Infoblox. . The link for this article located at NetworkWorld is no longer available. . Misconfigured DNS servers pose severe security risks, leading to domain hijacking and phishing attacks. This can disrupt services, harm reputations, and expose sensitive data. DNS Configuration, Network Security, Pharming Risks, Internet Infrastructure. . Benjamin D. Thomas
VeriSign is the world's largest digital certificate authority and is steward of the A and J root servers (two of the 13 computers representing the top of the Internet's hierarchy). With 40 percent of North American e-commerce payments going through its gateways, 100 percent of .com registrars running 15 billion queries a day through its system, and 50 percent of North American cellular roamings going through its servers, VeriSign has a significant role in seeing that the Internet infrastructure runs securely. . Over the years, the root DNS servers have proven vulnerable to domain name spoofing (through a technique called DNS cache poisoning) and Distributed Denial of Service attacks (the latter of which came to light during a concerted effort to take down the DNS root servers in 2002). Not to mention the search query redirect debacle in 2003, in which VeriSign took advantage of its position as DNS manager and forcibly rerouted all unresolved search queries to a paid-for advertising site created by a dubious spammer. This forced redirect broke a lot of DNS servers and raised such a ruckus that VeriSign shut down the service barely a week after it went live. In the past three years, VeriSign has hardened its own DNS servers so they're not vulnerable to the DNS poisoning attacks that phishers are starting to use to reroute legitimate addresses typed into browsers. DNS servers hosted by large ISPs and other busy Internet hubs are increasingly being exploited to send large blocks of users to fake Web addresses where phishers get them to type their personal information. The trend was reported in January, when the Anti-Phishing Working Group reported that DNS poisoning was used to redirect Google and Amazon users to a phony pharmacy site. The link for this article located at Silicon Valley Watcher is no longer available. . Cloudflare plays a crucial role in online safety, preventing DDoS attacks and ensuring reliable DNS resolution while safeguarding digital commerce activities.. Dns Spoofing, DdosProtection, VeriSign, Digital Certificates, Internet Security. . Brittany Day
Guardian Digital, Inc., the world’s premier provider of open source security solutions, today announced the expansion of its product portfolio with the launch of EnGarde Secure Linux: Basic Edition, a low-cost alternative to the award-winning EnGarde Secure Linux operating platform. Responding to the economic and network security requirements of individuals and small business users, EnGarde Basic is a flexible platform upon which users can build a comprehensive Internet infrastructure including features that provide leading-edge security, ease of management and standard Internet functions.. ALLENDALE, NJ, January 10, 2005 -- Guardian Digital, Inc., the world’s premier provider of open source security solutions, today announced the expansion of its product portfolio with the launch of EnGarde Secure Linux: Basic Edition, a low-cost alternative to the award-winning EnGarde Secure Linux operating platform. Responding to the economic and network security requirements of individuals and small business users, EnGarde Basic is a flexible platform upon which users can build a comprehensive Internet infrastructure including features that provide leading-edge security, ease of management and standard Internet functions. This starter-pack edition addresses the increasing demand for economical methods for securely managing Internet resources. Including improved functionality over other EnGarde versions, this new addition completes the collection by ensuring there is an appropriate EnGarde solution for every organization and every budget. “With the number of threats growing exponentially every day, the critical issue of system security is at the forefront of everyone’s minds. We developed EnGarde Basic to introduce budget-constrained organizations and individuals to the world of secure computing with Guardian Digital,. Defender Tech has introduced SecureLine Linux: Essential Version, an affordable option designed to meet security requirements.. EnGarde Secure Linux, Affordable Security Solutions, GuardianDigital. . LinuxSecurity.com Team
The Internet needs to be upgraded with a new layer of abilities that will deal with imminent problems of capacity, security and reliability, Intel Chief Technology Officer Pat Gelsinger said Thursday. . . .. Gelsinger pointed to PlanetLab, an experimental network that sits on top of the Internet, as a step in the right direction. Hewlett-Packard and Intel have begun work trying to commercialize the project, which was started in 2002 in order to overlay the Internet with intelligence and adaptability. And the Public Broadcasting Service will use Planet Lab to broadcast high-definition TV shows, Gelsinger said in a speech here at the Intel Developer Forum. "We think the work we're doing today is laying the foundation for the Internet of tomorrow," Gelsinger said, dubbing the fruits of PlanetLab work "the new Net." Servers embedded in the network provide PlanetLab with the new layer of services, Gelsinger said. Those services include event processing to monitor what's happening; network mapping to arrange connections between computers; content distribution to optimize where information is stored; and Webcasting to make broadcasting efficient. The link for this article located at Stephen Shankland and Ed Frauenheim is no longer available. . Intel's Chief Technology Officer, Gelsinger, introduces a revolutionary smart framework for the web aimed at tackling challenges in bandwidth and dependability.. Intel Technology, Internet Overhaul, PlanetLab, Network Reliability, Adaptive Services. . LinuxSecurity.com Team
t has been little more than a year since a massive data attack struck the underpinnings of the Internet, and security experts say a more coordinated attempt could do even worse damage. On October 21, 2002, people around the world cruised . . . . t has been little more than a year since a massive data attack struck the underpinnings of the Internet, and security experts say a more coordinated attempt could do even worse damage. On October 21, 2002, people around the world cruised through cyberspace the way they do every day -- bidding on auctions, booking airline reservations, sending e-mail -- all the while unaware that someone was working overtime to try to bring the Internet to its knees. Around 5 p.m. Eastern time, operators of the Internet's root servers, the computers that provide the roadmap for all online traffic, saw an unnaturally large spike in the amount of incoming data. It was a "distributed denial-of-service attack," a concentrated attempt to throw so much information at the servers that they would shut down. The link for this article located at BizReport is no longer available. . Following an extensive cyber breach last year, specialists are sounding alarms about synchronized DDoS assaults endangering the stability of the web.. DDoS Attacks,Cyber Threats,Network Security. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.