Just In
- 13 hrs ago OPPO Find X7 Ultra Camera Deep-Dive: Pushing the Boundaries of Photography on a Smartphone
- 14 hrs ago iQOO Z9 Turbo Launched in China: Snapdragon 8s Gen 3, 16GB RAM, and More
- 15 hrs ago iQOO Z9, Z9x Launched in China: 6000mAh Battery, iQOO 12 Inspired Design, 50MP Camera, & More
- 16 hrs ago HMD Branded First Set of Android Smartphones Are Here!
Don't Miss
- Movies Bigg Boss Malayalam 6 Voting Results: Not Arjun, THIS Contestant Beats Jasmin To Get Highest Votes In Week 7
- Sports IPL 2024: RCB to Play 250th IPL Match Today - Records by Seasons, Win Percentage, Latest Stats So Far
- Finance JPMorgan CEO Jamie Dimon Hails PM Modi's Economic Reforms, Urges US to Follow Suit; Details
- News Actress Tamannaah Gets Summons From Maharashtra Cyber Cell In Illegal IPL Streaming App Case
- Automobiles New Features Of The Ultraviolette F77 Mach 2: Uniting Performance, Safety, And Technology
- Lifestyle When Will Vaishakh Month 2024 Start? Vrats And Festivals That Will Fall This Month, Complete List!
- Education JEE Main Result 2024 Out, Telangana's 15 Toppers Shine, Check Statewise List of 56 Candidates with Perfect 100
- Travel Escape to Kalimpong, Gangtok, and Darjeeling with IRCTC's Tour Package; Check Itinerary
Popular website security solution not safe enough: Study
Computer scientists have found that the most common used Domain Name System (DNS) redirection strategy -- the success of which depends on shielding the website's original IP address -- is not secure as it can easily be bypassed.
Websites and online services increasingly have to deal with acts of cybercrimes. "Website owners can protect themselves against cyberattacks by installing dedicated hardware," said Thomas Vissers from the University of Leuven.
SEE ALSO: The Ultimate Rumor Roundup of Microsoft Surface Phone!
"Yet, this is typically too expensive and too complex for most of them. That's why website owners often rely on the services offered by cloud-based security providers," he added. One strategy these providers commonly use to protect websites includes diverting incoming web traffic via their own infrastructure which is sufficiently robust to detect and absorb cyberattacks.
"However, the success of this strategy heavily depends on how well the website's original IP address can be shielded. If that IP address can be retrieved, protection mechanisms can easily be bypassed," Vissers said.
According to the researchers, this is the Achilles heel of cloud-based security. Nearly 18,000 websites, protected by five different providers, were subjected to the team's DNS redirection vulnerability tests.
The researchers built a tool called CLOUDPIERCER, which automatically tries to retrieve websites' original IP address based on eight different methods, including the use of unprotected subdomains. The results were pretty confronting.
In more than 70 percent of the cases, CLOUDPIERCER was able to effectively retrieve the website's original IP address, thereby, providing the exact information that is needed to launch a successful cyberattack.
SEE ALSO: 7 Reasons to be Excited About Huawei Smartwatch Launched at Rs 22,999!
The findings were presented at the 22nd ACM Conference on Computer and Communications Security (CCS) held in Denver, Colorado, recently. "With CLOUDPIERCER, people can test their own website against the eight methods that we have used in our research. CLOUDPIERCER scans the website, and indicates to which IP detection method it is most vulnerable," Vissers noted. The tool has been made available for free.
Source IANS
-
99,999
-
1,29,999
-
69,999
-
41,999
-
64,999
-
99,999
-
29,999
-
63,999
-
39,999
-
1,56,900
-
79,900
-
1,39,900
-
1,29,900
-
65,900
-
1,56,900
-
1,30,990
-
76,990
-
16,499
-
30,700
-
12,999
-
11,999
-
16,026
-
14,248
-
14,466
-
26,634
-
18,800
-
62,425
-
1,15,909
-
93,635
-
75,804