Defending Against Layer 7 DDoS Attacks

Layer 7 attacks are some of the most difficult attacks to mitigate because they mimic normal user behavior and are harder to identify. The application layer (per the Open Systems Interconnection model) consists of protocols that focus on process-to-process communication across an IP network and is the only layer that directly interacts with the end user. A sophisticated Layer 7 DDoS attack may target specific areas of a website, making it even more difficult to separate from normal traffic. For example, a Layer 7 DDoS attack might target a website element (e.g., company logo or page graphic) to consume resources every time it is downloaded with the intent to exhaust the server. Additionally, some attackers may use Layer 7 DDoS attacks as diversionary tactics to steal information.

(more…)

Verisign Q2 2016 Domain Name Industry Brief: Internet Grows to Approximately 334.6 Million Domain Names in the Second Quarter of 2016

Today, we released the latest issue of the Domain Name Industry Brief, which showed that the internet grew by approximately 7.9 million domain name registrations in the second quarter of 2016, and closed with a base of 334.6 million domain name registrations across all top-level domains (TLDs). This is a 2.4 percent increase over the first quarter of 2016.

(more…)

Increasing the Strength of the Zone Signing Key for the Root Zone, Part II

A few months ago I published a blog post about Verisign’s plans to increase the strength of the Zone Signing Key (ZSK) for the root zone. I’m pleased to provide this update that we have started the process to pre-publish a 2048-bit ZSK in the root zone for the first time on Sept. 20. Following that, we will publish root zones with the larger key on Oct. 1, 2016.

To help understand how we arrived at this point, let’s take a look back.

(more…)

Verisign Announces .닷컴 and .닷넷 Domain Names Are Now Available for General Registration

Guest post from June Seo, Director, Verisign Naming Services Korea 

Today, Verisign is excited to announce that .닷컴 and .닷넷, the localized versions of the .com and .net top-level domains (TLDs) in Hangul script, are now open for the registration of domain names by the general public on a first-come, first-served basis, subject to availability and the applicable registry policies.* The General Registration Period for .닷컴 and .닷넷 began at 00:00:00 UTC on Aug. 30, 2016, following the Landrush Program Period.**

(more…)

Verisign Q2 2016 DDoS Trends: Layer 7 DDoS Attacks a Growing Trend

Verisign just released its Q2 2016 DDoS Trends Report, which provides a unique view into online distributed denial of service (DDoS) attack trends from mitigations enacted on behalf of customers of Verisign DDoS Protection Services and research conducted by Verisign iDefense Security Intelligence Services.

Every industry is at risk as DDoS attacks continue to increase in frequency, consistency and complexity. Comparing year-over-year attack activity, Verisign mitigated 75 percent more attacks in Q2 2016 than in Q2 2015. The largest attack mitigated by Verisign in Q2 2016 peaked at 250+ Gbps before settling in at 200+ Gbps for almost two hours.

Verisign also observed a growing trend of low-volume application layer, or Layer 7, attacks that probe for vulnerabilities in application code and exploit HTTP/S field headers within request packets to disable applications. These attacks were frequently coupled with high-volume UDP flood attacks to distract the victim from the Layer 7 attack component, often requiring multiple and advanced filtering techniques.

(more…)

Internet Grows to 326.4 Million Domain Names in the First Quarter of 2016

Today, we released the latest issue of the Domain Name Industry Brief, which showed that the internet grew by approximately 12 million domain names in the first quarter of 2016, and closed with a base of 326.4 million domain names across all top-level domains (TLDs). This is a 3.8 percent increase over the fourth quarter of 2015. [1]

(more…)

Verisign Announces .コム Domain Names Are Now Available for Anyone to Register

Guest post from Manish Dalal, Vice President, Verisign Naming Services, Asia-Pacific

Today, Verisign is excited to announce the General Registration Period for .コム – the .com you know, now in Japanese – during which anyone can register .コム domain names on a first-come, first-served basis, subject to availability and the applicable registry policies. The General Registration Period for .コム began at 00:00:00 UTC on June 13, 2016, following the Landrush Program Period.*

(more…)

Verisign Q1 2016 DDoS Trends: Attack Activity Increases 111 Percent Year Over Year

Verisign just released its Q1 2016 DDoS Trends Report, which provides a unique view into online distributed denial of service (DDoS) attack trends from mitigations enacted on behalf of customers of Verisign DDoS Protection Services and research conducted by Verisign iDefense Security Intelligence Services.

Every industry is at risk as DDoS attacks continue to increase in size, frequency and sophistication. The most notable observation last quarter is the increase in DDoS attack activity, which was at its highest since the inception of Verisign’s DDoS Trends Report in Q1 2014. Comparing year-over-year attack activity, Verisign mitigated 111 percent more attacks in Q1 2016 than in Q1 2015.

(more…)

We Need You: Industry Collaboration to Improve Registration Data Services

For more than 30 years, the industry has used a service and protocol named WHOIS to access the data associated with domain name and internet address registration activities.

Do you need to find out who has registered a particular domain name? Use WHOIS.
Do you want to see who an Internet Protocol (IP) address has been allocated to? Use WHOIS.

(more…)