Net's Vulnerability Exposed
Attack on root servers resulted in moderate damage - this time
Computerworld - Last week's assault on the Internet's core addressing system may not have caused much real damage, but it highlights the Internet's vulnerability to more sophisticated cyberattacks in the future, security analysts warned.
All 13 of the Internet's root Domain Name System serversthree of which are located outside the U.S.were victims of a massive distributed denial-of-service attack on Oct. 21.
"It was the single most elaborate and focused attack on the DNS network that we have ever seen," said Tom Ohlsson, vice president of Matrix NetSystems Inc., an Austin, Texas-based Internet performance monitoring company.
The attack appears to have been an attempt to disrupt the Internet by clogging root DNS servers with useless traffic. The root DNS servers provide the vital translation services needed for converting a Web name such as www.computerworld.com into a corresponding numerical IP address.
But overall Internet service appears to have been largely unscathed, with few major disruptions reported, Ohlsson noted.
That's because most of the information contained in the 13 root DNS servers is cached in redundant and hierarchical fashion across multiple secondary DNS servers.
"On the plus side, this shows that despite all those apocalyptic projections, the Internet is more resilient than people think," said John Pescatore, an analyst at Gartner Inc. in Stamford, Conn. "But it also shows that the basic plumbing of the Internet still has vulnerabilities that need to be addressed or brought up to business-quality levels."
The relatively simply nature of last week's DDOS attack is what made it easy for administrators to detect and choke off the offending traffic in a few hours, analysts said.
But service would have started degrading if the attack had been sustained long enough for the information contained in the secondary DNS caches to start expiringa process that usually takes from a few hours to about two days, analysts added.
"This wasn't exactly the most sophisticated attack in the world," said Jerry Brady, chief technology officer at Guardent Inc., a security consultancy in Waltham, Mass. "But I've got to believe that this is going to inspire a lot more attacks like this in future."
In a DDOS attack, hackers typically break into and take over thousands of poorly protected networked computersincluding those in homesand use such "zombies" to send torrents of useless data at target servers or networks.
"It is the electronic equivalent of somehow getting 50,000 phones to dial 911 at the same time," said Mark D. Rasch, former head of the U.S. Department of Justice's computer crimes unit and currently senior vice president and chief security counsel at Solutionary Inc.
The Internet Corporation for Assigned Names and Numbers (ICANN), the private group that's charged with ensuring the stability and security of the DNS, will discuss methods for improving DNS security at its annual meeting next week in Shanghai.
- Radicati: Cloud Business Email - Market Quadrant 2013 Google was named the top cloud business email provider in a recent report by research firm Radicati. Out of 14 key players, Google...
- Tablets in the Enterprise: A Checklist for Successful Deployment How can you enterprise manage and secure tablets in order to protect corporate data while providing access to the information and applications employees...
- Enterprise Mobility: A Checklist for Secure Containerization The advantages and disadvantages of the multiple approaches to containerization. Learn More>>
- Enterprise File Sync & Share Checklist File sync and share has changed the way people work and collaborate in today's tech-savvy world. Gone are the email roadblocks, clunky FTP...
- Live Webcast LIVE EVENT: 5/7, The End of Data Protection As We Know It. Introducing a Next Generation Data Protection Architecture. Traditional backup is going away, but where does this leave end-users?
- LIVE EVENT: 5/7, The End of Data Protection As We Know It. Introducing a Next Generation Data Protection Architecture. Traditional backup is going away, but where does this leave end-users?
- On-demand webinar: "Mobility Mayhem: Balancing BYOD with Enterprise Security" Check out this on-demand webinar to hear Sophos senior security expert John Shier deep dive into how BYOD impacts your enterprise security strategy... All Security White Papers | Webcasts