White Papers

Enhancing DNS Resilience Against Denial of Service Attacks

Category: Security

Tags: ddos, infrastructure

Overview The Domain Name System (DNS) is a critical Internet infrastructure that provides name to address mapping services. In the past few years, Distributed Denial of Service (DDoS) attacks have targeted the DNS infrastructure and threaten to disrupt this critical service. This paper shows that the existing DNS can gain significant resilience against DDoS attacks through a simple change to the current DNS operations, by setting longer time-to-live values for a special class of DNS resource records, the infrastructure records. These records are used to navigate the DNS hierarchy and change infrequently. Furthermore, in combination with a set of simple and incrementally deployable record renewal policies, the DNS service availability can be improved by one order of magnitude.

Download White Paper

By downloading you agree to our Terms and Conditions. These include information regarding use of your personal data.

Publisher
IBM
File Format
PDF
Date Published
Jun 20, 2009
Format
White Papers
Topics
Denial of Service, Network Security, Security Management

Similiar White Papers

X-Force®Threat Insight Quarterly Voice over Internet Protocol (VoIP) ? Find out what the threats and challenges are for anyone deploying VoIP

X-Force®Threat Insight Quarterly Voice over Internet Protocol (VoIP) ? Find out what the threats and challenges are for anyone deploying VoIP

The X-Force Threat Insight Quarterly (Threat IQ) highlights the most significant threats and challenges facing security

Publisher: Internet Security Systems  |  Tags: homeland security, security flaws, voip

An independent report by ICSA Labs on the performance of ISS' VoIP-enabled Intrusion Prevention devices

An independent report by ICSA Labs on the performance of ISS' VoIP-enabled Intrusion Prevention devices

This technical product evaluation is focused on the ISS VoIP-enabled Intrusion Prevention devices. These are built to su

Publisher: Internet Security Systems  |  Tags: voip

IT's New Role: Defining and Managing Risk

IT's New Role: Defining and Managing Risk

This article explores how a Security Risk Management (SRM) approach can protect your company from the most severe threat

Publisher: McAfee  |  Tags: srm

Cisco - Strategies to Protect Against Distributed Denial of Service (DDoS) Attacks

Cisco - Strategies to Protect Against Distributed Denial of Service (DDoS) Attacks

In order to facilitate Distributed Denial of Service (DDoS), the attackers need to have several hundred to several thous

Publisher: Cisco Systems  |  Tags: ddos, linux

Jargon, jargon, jargon. Find out what the IT industries acronyms really mean

Jargon, jargon, jargon. Find out what the IT industries acronyms really mean

ISS provide you with a simple glossary of major VoIP terms. What do they really mean, when can they be used? Make yourse

Publisher: Internet Security Systems  |  Tags: voip

IBM White Papers

Integrated Change & Release Management

Integrated Change & Release Management

Short deadlines and constant change epitomize the challenges of software and systems development. Routine change increas

Publisher: IBM  |  Tags: software

Webcast: Introducing IBM Lotus Quickr -- The Fastest Way to Share Content with Your Teams

Webcast: Introducing IBM Lotus Quickr -- The Fastest Way to Share Content with Your Teams

Have you heard the buzz about Lotus Quickr? Lotus Quickr is IBM's new Web 2.0-based team collaboration software that is

Publisher: IBM  |  Tags: collaboration software, software

An examination of server consolidation: the trends that can drive efficiencies and help businesses gain a competitive edge

An examination of server consolidation: the trends that can drive efficiencies and help businesses gain a competitive edge

This white paper provides a starting point for organizations contemplating server consolidation. It includes an overview

Publisher: IBM  |  Tags: cost savings, server

Build Strong, Flexible J2EE apps With a WebSphere Cluster Environment

Build Strong, Flexible J2EE apps With a WebSphere Cluster Environment

When building a strong, extensible, and flexible J2EE application, one needs to consider several factors. One important

Publisher: IBM  |  Tags: application server, management, server

Deploying Oracle ASM With Oracle 10g RAC on AIX With IBM System Storage DS8000 and DS6000 Advanced Features

Deploying Oracle ASM With Oracle 10g RAC on AIX With IBM System Storage DS8000 and DS6000 Advanced Features

The IBM System Storage DS8000 and DS6000 Disk Storage systems are both high performance storage systems that offer expan

Publisher: IBM  |  Tags: data, database, server