|
contents | software | |||||||
| Nominum Announces the Latest Vantio Software Release Nominum announces the availability of a new security release for its Vantio caching DNS server platform. The latest Vantio software release provides multi-layer intelligent defenses that defeat DNS cache poisoning and other attacks, including the recently publicized Kaminsky vulnerability. By offering built-in defense-in-depth, the Nominum solution far surpasses the recently released industry standard UDP Source Port Randomization (UDP SPR). In fact, Vantio's new defenses negate the brute force advantage attackers gained with the latest DNS cache poisoning vulnerability. Key benefits of new Vantio DNS security features: - Resists and stops all forms of cache poisoning attacks; - Defends automatically against query response spoofing and takes attackers out of loop; - Prevents hijacking of subscriber traffic, or "pharming" attacks; - Identifies perpetrators and records attack attempts; - Provides protection in Enterprise and Service Provider networks that use network address translation (NAT), which can undermine UDP SPR (NAT devices include server load balancers and firewalls); - Reduces the chance of poisoning answers for valuable domains to zero. Nominum and its customers were instrumental in implementing and deploying UDP SPR as part of an industry-wide response to the cache poisoning threat. This feature offered immediate protection to over 120 million broadband subscribers supported by Nominum DNS servers at nearly one hundred carriers and ISPs (click here for a partial list of Nominum's key customers). UDP source port randomization is only a first-step response to the new vulnerability, and network operators need additional deterministic defenses to address important exploits. Cache poisoning attacks rely on many techniques, and response spoofing is only one of them. UDP source port randomization is designed to mitigate risk of spoofing, but is not effective against a determined attacker or other forms of attacks. Response spoofing can be easily subverted when more network resources are available to an attacker that allow for sending many spoofed responses. Nominum's new defenses are critical to ensuring the attacker does not succeed. Vantio features the following four security layers with key security features highlighted: - Deterrence Layer: Includes Nominum's UDP Source Port Randomization implementation, the recommended industry response to the Kaminsky threat. - Defense Layer: Incorporates Nominum's "Detect and Defend" capability to detect spoofing attempts and automatically switch the resolution to a secure connection in response to an attack attempt. - Resistance Layer: Employs Query Response Screening with a set of features that intelligently screen DNS answers to ensure malicious data in DNS responses is not used to answer valid user queries. - Remediation Layer: Sends alerts when an attack is under way and incorporates a new feature that records the attack, allowing the attacker to be identified, and real-time remedial action to be taken by the network operator. The new Vantio release is generally available as standard software purchase for carriers, large enterprise and government customers. write your comments about the article :: © 2008 Computing News :: home page |