Update: Two DNS servers hit by denial-of-service attacks
The attacks were targeted at Network Solutions' Worldnic name servers
Computerworld - In the second attack of its kind in the past few days, Domain Name System (DNS) servers at Network Solutions Inc. were hit by a denial-of-service attack this afternoon, resulting in a brief performance degradation for customers, according to the company.
The attacks, which started at around 2:20 p.m. EST, were targeted at the companys WorldNIC name servers and resulted in a service degradation for about 25 minutes before the server was restored to normal, a spokeswoman for the company said.
A Network Solutions spokeswoman declined to say what measures the Herndon, Va.-based company took to mitigate the attack.
Over the weekend, Joker.com, a domain-name registrar in Germany, was hit with a similar distributed denial-of-service (DDoS) attack that disrupted service to customers.
In an advisory posted on its site, Joker said that massive attacks against its DNS servers had affected the DNS resolution of Joker.com as well as domains belonging to its customers.
In an update posted today on its Web site, Joker.com said the DDoS attack began on March 20 and continued through Sunday. A minor attack still continues, the company said.
Upstream providers reported traffic peaks of about 1.3 Gigabits per second on a single line, Joker.com said in its note. This was enough to overload our lines, causing communication problems between our border routers and the upstream providers. The result was a complete service interruption for a short period on March 20, the company said.
Joker.com responded to the attack by adding more name servers, some of them hosted in external data centers. It also reserved more bandwidth for Joker.com exclusively.
These measures seem to have helped, since the later attacks did not affect our systems as much as the first one, the company said.
According to Netcraft Ltd., a Bath, England-based Internet performance monitoring company, more than 550,000 domains are registered with Joker. Any of those domains that use Joker's DNS servers are likely to be affected, Netcraft said in a note posted on its Web site.
A DNS server is used to look up and translate domain names such as Computerworld.com from plain text to numeric Internet Protocol addresses.
Attacks against DNS servers, though relatively rare until now, are considered especially critical because of their potential to bring down large numbers of Web sites.
In October 2002, all 13 of the Internet's root DNS servers were victims of a massive DDoS attack that raised concerns about the Internets infrastructure but did little damage otherwise.
Just a week ago, VeriSign Inc. said that about 1,500 organizations worldwide had been attacked earlier this year by unknown hackers who employed botnets and DNS servers to launch a particularly devastating form of DoS attack (see "VeriSign details massive denial-of-service attacks").
In the attacks described by VeriSign, DNS servers were used to amplify the affects of denial-of-service attacks and were not really targets themselves. But security experts said they believe that DNS servers could just as easily become targets.
Read more about Applications in Computerworld's Applications Topic Center.
- Best iPhone, iPad Business Apps for 2014
- 14 Tech Conventions You Should Attend in 2014
- 10 Desktop Apps to Power Your Windows PC
- How to Add New Job Skills Without Going Back to School
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
Red Hat Enterprise Linux - The Original Cloud Operating System
Linux adoption is growing against a number of measures, such as the
number of supercomputers that run Linux and the size of the contributing...
- OpenStack Hype vs. Reality: CIO Quick Pulse Open-source architecture can enable IT departments to build infrastructure-as-a-service (IaaS) clouds running on standard hardware.
- Building a Bridge to the Next Generation Data Center Selecting a widely adopted operating system is a foundational component of a standardization strategy.
- OpenStack and Red Hat: IDC White paper Most OpenStack deployments are by public cloud providers that are early adopters of technology and use OpenStack in a do-it-yourself deployment and support...
- Live Webcast Best Practices for the Hyperconverged Enterprise Network To the Age of Constant Connectivity and Information overload
- Live Webcast On-demand webinar: "Mobility Mayhem: Balancing BYOD with Enterprise Security" Check out this on-demand webinar to hear Sophos senior security expert John Shier deep dive into how BYOD impacts your enterprise security strategy...
- Live Webcast Endpoint Backup & Restore: Protect Everyone, Everywhere Arek Sokol from the bleeding-edge IT team at Genentech/Roche explains how he leverages cross-platform enterprise endpoint backup in the public cloud as part...
- The New Way to Work Knowledge Vault This Knowledge Vault focuses on how, in today's increasingly virtual world, it's more important than ever to engage deeply with employees, suppliers, partners,...
- Getting Ready for BlackBerry Enterprise Service 10.2 Find out how BlackBerry® Enterprise Service 10 helps organizations address the full spectrum of EMM challenges, while balancing the needs of both the...