Verisign Team


    Recent posts by Verisign Team:

    Verisign Celebrates #30YearsofCOM

    • By • Domain Names

    This year marks 30 years since the first .com domain name – Symbolics.com – was registered, and the internet and world as we knew it changed forever. Verisign, the authoritative registry operator of .com, is celebrating its 30th anniversary and the remarkable impact .com has had on the economy and culture.

    In the last 30 years, the internet has evolved from an unknown phenomenon used primarily by academics and researchers to a global communication, commerce and information sharing channel that few could imagine life without; in fact, nearly three billion people around the world are online today, and more than $300 billion in U.S. e-commerce sales and over $1.3 trillion in global e-commerce sales rely on the internet.

    (more…)

    Internet Grows to 288 Million Domain Names in the Fourth Quarter of 2014

    • By • Domain Names

    Today, we released the latest issue of the Domain Name Industry Brief, which showed that the Internet grew by four million domain names in the fourth quarter of 2014. The total number of domain names across all top-level domains (TLDs) is now 288 million. This is a 1.3 percent increase over the third quarter of 2014. [1]

    TLD by Zone Size Q4 2014

    .com and .net Breakdown

    New .COM and .net registrations totaled 8.2 million, bringing the combined number of .COM and .net TLDs to 130.6 million domain names in the domain name base by the end of the fourth quarter of 2014.

    gTLD Breakdown

    At the end of the fourth quarter of 2014, 478 new gTLDs were delegated into the root; with 65 new gTLDs delegated during the fourth quarter of 2014. [2]

    The chart below captures the initial 60-day registration volume rank for those new gTLDs reaching 60 days of General Availability (GA) during the quarter. In the fourth quarter of 2014, 78 new gTLDs reached 60 days of GA and of those, the 10 largest new gTLDs, as measured by zone size at the end of the quarter, were: [3]

    10 largest new gTLDs by zone size Q4 2014

    ccTLD Breakdown

    Country-code top-level domains (ccTLDs) reached 134.0 million domain names. The top 10 ccTLD registries by domain name base were:

    ccTLDs by Zone Size Q4 2014

    DNS Query Load

    Verisign’s average daily Domain Name System (DNS) query load during the fourth quarter of 2014 was 110 billion across all TLDs operated by Verisign, with a peak of 146 billion. Year over year, the daily average increased 33.5 percent and the peak increased 47.1 percent.

    DNS Query Load Q4 2014

    For more domain stats from the fourth quarter of 2014, check out the infographic below and the latest issue of the Domain Name Industry Brief.

    [1] The gTLD and ccTLD data cited in this report are estimates as of the time this report was developed, and is subject to change as more complete data is received. Totals include ccTLD Internationalized Domain Names.

    [2] The total number of gTLDs and their registrations is published through the Centralized Zone Data Service: https://czds.icann.org/en

    [3] The new gTLDs that reached 60 days of General Availability during the fourth quarter was determined using: ntld stats

    Blue Folder With Keyhole on digital background

    “What’s in a Name?” Using DANE for Authentication of Internet Services

    • By • Security

    Do we already have strong security protections for our Internet services? For many years now, we have had numerous cryptographically enhanced protocols. Standards and suites like S/MIME, Transport Layer Security (TLS), IP Security (IPSec), OpenPGP, and many others have been mature for years, have offered us a range of protections and have been implemented by a wealth of code. Indeed, based on these protections, we already count on having “secure” eCommerce transactions, secure point-to-point phone calls that our neighbors can’t listen in on, secure Virtual Private Networks (VPN) that let us remotely connect to our internal enterprise networks, etc.  However, our Internet security protocols have all excluded a very important step from their security analyses; none of them describe a crucial step called secure key learning.  That is, before we can encrypt data or verify signatures, how does someone bootstrap and learn what cryptographic keys are needed?  In lieu of a way to do this, we have traditionally prefaced the security protections from these protocols with techniques like Out of Band (OOB) key learning (learning keys in an unspecified way) or Trust on First Use (ToFU) key learning (just accepting whatever keys are found first), and each protocol must do this separately (and potentially in its own, different, way).  This is because the protocols we use for protections have not formally specified a standardized way to securely bootstrap protocols.

    (more…)

    Verisign Q4 2014 DDoS Trends: Public Sector Experiences Largest Increase in DDoS Attacks

    • By • DDoS Protection, Security

    Verisign just released our Q4 2014 DDoS Trends Report, which provides a unique view into online distributed denial of service (DDoS) attack trends from mitigations on behalf of, and in cooperation with, customers of Verisign DDoS Protection Services, and the security research of iDefense Security Intelligence Services. Many notable observations were made, including a rise in the average size of DDoS attacks against our customers; the most common attack vector continued to be User Datagram Protocol (UDP) amplification attacks leveraging Network Time Protocol (NTP), while Simple Service Discovery Protocol (SSDP) also continued to be exploited. Verisign also mitigated more attacks in December than any other month in 2014.

    The most notable observation, however, is that public-sector customers experienced the largest increase in attacks, constituting 15 percent of total mitigations in Q4. Verisign believes the steep increase in the number of DDoS attacks levied at the public sector may be attributed to attackers’ increased use of DDoS attacks as tactics for politically motivated activism, or hacktivism, against various international governing organizations, as well as in reaction to various well-publicized events throughout the quarter, including protests in Hong Kong and Ferguson, Missouri. As outlined in iDefense’s 2015 Cyber Threats and Trends blog post, the convergence of online and physical protest movements contributed to the increased use of DDoS as a tactic against organizations, including the public sector, throughout 2014.

    (more…)

    Internet Grows to 284 Million Domain Names in the Third Quarter of 2014

    • By • Domain Names

    Today, we released the latest issue of the Domain Name Industry Brief, which showed that the Internet grew by four million domain names in the third quarter of 2014. The total number of domain names across all top-level domains (TLDs) is now 284 million. This is a 1.6 percent increase over the second quarter of 2014. [1]

    Largest TLDs by Zone Size

    TLD by Zone Size Q3 2014
    Source: Zooknic, Q3 2014; Verisign, Q3 2014; Centralized Zone Data Service, Q3 2014

    (more…)

    Verisign OpenHybrid™: An Essential New Approach to DDoS Protection

    • By • DDoS Protection, Security

    Distributed Denial of Service (DDoS) attacks are a threat to businesses worldwide and the attacks are getting larger and more sophisticated.  The industry’s approach to protecting against DDoS attacks must change, and change fundamentally, to stay ahead of this growing threat.

    For too long, the problem has been tackled piecemeal, using isolated devices or services. But protecting against DDoS attacks increasingly requires communication and coordination between many components – from networking equipment, to specialized appliances and cloud-based services.

    A shift in security architecture is needed to an open platform where devices and services from different vendors can share and act on information in concert. It must be a hybrid platform, allowing on-premise routers and security appliances to detect and mitigate attacks locally, while automating alerting and switchover to cloud-based services if an attack threatens to swamp the business’ network connection.

    (more…)

    New from Verisign Labs: What’s in your attack surface?

    • By • Security
    Recently, Verisign Labs researcher Eric Osterweil and Verisign CSO Danny McPherson, along with Lixia Zhang, a professor of computer science at UCLA, received the Best Paper Award at this year’s IEEE Workshop on Secure Network Protocols (NPSec ‘14) for their paper, “The Shape and Size of Threats: Defining a Networked System’s Attack Surface.” Below is a guest post from one of the authors, Eric Osterweil, principal researcher for Verisign Labs, describing the genesis of the research and future plans.

    (more…)

    Domain Registrations: Is Bitcoin Going Mainstream?

    • By • • Domain Names

    Earlier this year we used Bitcoin as an example of how domain registrations could be an effective gauge of interest in a particular subject. Our analysis demonstrated a clear rise in the number of registered .com and .net domain names containing the term “Bitcoin” in 2013, as well as a positive correlation between increased registration activity and increases in the dollar value of bitcoin.

    In this post, we decided to take a look at the history of Bitcoin-related domain registration activity since 2009 to see if we noticed any other trends.

    (more…)

    New from Verisign Labs: Measuring the Leakage of Onion at the Root

    • By • Security

    If you are trying to communicate anonymously on the internet using Tor, this paper may be an important read for you. Anonymity and privacy are at the core of what the Tor project promises its users. Short for The Onion Router, Tor provides individuals with a mechanism to communicate anonymously on the internet. As part of its offerings, Tor provides hidden services, specifically anonymous networking between servers that are configured to receive inbound connections only through Tor. In order to route requests to these hidden services, a namespace is used to identify the resolution requests to such services. Tor uses the .onion namespace under a non-delegated (pseudo) top-level-domain. Although the Tor system was designed to prevent .onion requests from leaking into the global DNS resolution process, numerous requests are still observed in the global DNS, causing concern about the severity of the leakage and the exposure of sensitive private data.

    (more…)