Saturday | 6 September, 2008
Computerworld
Lessons learned from 'Net root server attack
Most corporate Web sites and IP networks couldn't withstand the ferocity of the latest attacks

Computerworld Buyer's Guide - Vendors Matched to this Article
Related Features
  • +

    Process Trip 04/02/2008 13:07:03

    Why Maritz Travel revamped key business processes — and how business and IT came together to make it work
    When Rich Phillips became COO OF Maritz Travel about two and-a-half years ago, he sat down and took a hard look at the big industry picture
  • +

    Ticked Off at Tick the Box Mentality 04/02/2008 13:01:15

    Does your executive search firm know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?
    Does your executive search firm know its MIS managers from its elbow? Does it even know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?
  • +

    Order Takers to Innovators 02/10/2007 15:20:08

    How four CIOs energized their staffs to take risks with new technology and generate fresh value for their businesses
    When David Behen became IT director for Washtenaw County, Michigan, the department was little more than an order-taker. And not a very good one. It was kind of like the waiter who makes you wait, then brings the entree with the mains and brings you a bottle of Grange when you asked for a carafe of the house red
  • +

    Your World. . . Hacked 02/10/2007 10:51:23

    As your business becomes more collaborative and global, the risks to your company’s trade secrets rise proportionally. Fortunately, there are new strategies to protect the data that allows you to compete
    The call to Bob Bailey, an IT executive with a major US government contractor, came on an otherwise ordinary day in October 2003. "Why are you attacking us?" demanded the caller, an IT leader with a Silicon Valley manufacturer. He wanted to know why Bailey's company had launched a denial-of-service attack against his network
Additional Resources
Executive Guides
Whitepapers
Zones
Zone logoZones provide focussed content from Computerworld and leading technology partners.

Newsletter Subscription

Sign up for our Computerworld newsletters!
Computerworld's twice-daily news service keeps you in touch with the latest, most important headlines from Australia and around the world.
Keep up with the latest virtualisation technologies, products, news and features.
RSS Feeds

Bad news

Despite the positive outcome of the latest attacks, security experts warn against complacency.

"I don't know if a serious effort could take out the root server system," Bellovin says. "We've heard of some really large botnets...The steps that have been taken since 2002 have made the network considerably more robust and resilient in the face of this kind of attack. We don't know if it's robust or resilient enough yet."

A botnet attack like this one would be more significant if it damaged the DNS servers that run key domains such as .com or .net. That's because the root servers handle far fewer queries than the .com and .net servers.

"There's more impact at the next level down below the root," says Ken Silva, chief security officer for VeriSign, which operates two root servers as well as the registries for .com and .net. "The .com servers handle 450,000 queries per second. If they don't work, that's 450,000 queries per second that fail to connect."

Protecting against these kind of attacks is why VeriSign announced this week a three-year, US$100 million effort to upgrade and expand the servers and network infrastructure that support its .com, .net and root servers. Dubbed Project Titan, the initiative will increase the capacity of VeriSign's network infrastructure 10 times by 2010.

Project Titan will "make the entire infrastructure that we operate much more resilient to these attacks," Silva says. It is "without a doubt the largest upgrade to a DNS top-level domain that's ever happened."

Few companies, government agencies or universities that run the DNS root servers on a voluntary basis can afford the kind of investment that VeriSign is making with Project Titan.

Corporate network managers also need to stay ahead of the game by continuing to invest in distributed DNS servers of their own.

McPherson says few corporations could withstand the kind of attack aimed at the three root servers this week.

"This was a 2G to 3Gbps attack," he says. "That could take most enterprises offline pretty easily...Attacks like this are pretty easy to launch."

McPherson says Arbor Networks saw DNS amplification attacks as large as 22G to 25Gbps during 2006. "They were pretty ugly, and the scale of those attacks was pretty large," he says. "The root servers are pretty resilient but most enterprises are not."

--Senior Editor Ellen Messmer contributed to this report.

Computerworld Buyer's Guide - Vendors Matched to this Article
Market Place

Computerworld Member Login


 

Prioritizing Services with IT Service Management (ITSM)

Computerworld Live Webinar
Wednesday 20th, August 2008
11:00am EST (Sydney, Australia)

To be repeated on:

Thursday 4th, September 2008
11:00am EST (Sydney Australia)

Sign up and receive a free copy of The Forrester WaveTM Service Desk Management Tools, Q2 2008 at the conclusion of the Webinar.

Attend and discover:

  • How to deliver value to your business through ITSM
  • Best practice ITSM implementation
  • Why emphasis is changing from optimizing IT management processes to better servicing customers and demonstrating real dollar value
  • If service-oriented ITSM is best for your business
Whitepaper

EMC Data Profiling for File System and Exchange Server Environments

There has been an explosive and seemingly unmanageable growth of information in business today. Discover how EMC can utilise intelligent data analysis to develop a strategic plan for your business and optimise your organisation’s file system and Exchange Environments.

Enterprise IT Buyer's Guide
Find Technology Vendors Fast
 
Find vendors by name | Find by category
Sponsored Links