Just In
- 1 hr ago Garena Free Fire Max Redeem Codes for April 20, 2024: Get Access to the Latest In-game Loot
- 1 hr ago Apple Watch X Renders Surface: Magnetic Bands, Blood Pressure Tracking, and More
- 2 hrs ago Confirmed List of Products Launching at Xiaomi Smarter Living 2024
- 2 hrs ago Google Pixel 9 Pro Live Images Leaked - Comes with Tensor G4, 16GB RAM
Don't Miss
- Finance 1:2 Stock Split, Dividend 100%, Net Soars 52.56%: Engineering Stock Soars 1576% In 3-Yrs
- News Protests Erupt After 24-Year-Old Neha's Murder In BVB College Campus In Hubballi
- Sports WWE Raw: Battle Royal announced to determine new Women’s World Champion
- Movies Metro In Dino: When Ananya Panday Warns Sara Ali Khan Not To Touch Aditya Roy Kapur As She Pairs Up With Him
- Lifestyle Mahavir Jayanti 2024: Date, Time, History, Celebrations And Teachings Of Lord Mahavir In Jainism
- Automobiles Ford Mustang 60th Anniversary Package – Limited To Just 1,965 Units
- Education Exam Pressure Does Not Exist; Studying Punctually is Crucial; Says Aditi, the PSEB 2024 Topper
- Travel Journey From Delhi To Ooty: Top Transport Options And Attractions
Popular website security solution not safe enough: Study
Computer scientists have found that the most common used Domain Name System (DNS) redirection strategy -- the success of which depends on shielding the website's original IP address -- is not secure as it can easily be bypassed.
Websites and online services increasingly have to deal with acts of cybercrimes. "Website owners can protect themselves against cyberattacks by installing dedicated hardware," said Thomas Vissers from the University of Leuven.
SEE ALSO: The Ultimate Rumor Roundup of Microsoft Surface Phone!
"Yet, this is typically too expensive and too complex for most of them. That's why website owners often rely on the services offered by cloud-based security providers," he added. One strategy these providers commonly use to protect websites includes diverting incoming web traffic via their own infrastructure which is sufficiently robust to detect and absorb cyberattacks.
"However, the success of this strategy heavily depends on how well the website's original IP address can be shielded. If that IP address can be retrieved, protection mechanisms can easily be bypassed," Vissers said.
According to the researchers, this is the Achilles heel of cloud-based security. Nearly 18,000 websites, protected by five different providers, were subjected to the team's DNS redirection vulnerability tests.
The researchers built a tool called CLOUDPIERCER, which automatically tries to retrieve websites' original IP address based on eight different methods, including the use of unprotected subdomains. The results were pretty confronting.
In more than 70 percent of the cases, CLOUDPIERCER was able to effectively retrieve the website's original IP address, thereby, providing the exact information that is needed to launch a successful cyberattack.
SEE ALSO: 7 Reasons to be Excited About Huawei Smartwatch Launched at Rs 22,999!
The findings were presented at the 22nd ACM Conference on Computer and Communications Security (CCS) held in Denver, Colorado, recently. "With CLOUDPIERCER, people can test their own website against the eight methods that we have used in our research. CLOUDPIERCER scans the website, and indicates to which IP detection method it is most vulnerable," Vissers noted. The tool has been made available for free.
Source IANS
-
99,999
-
1,29,999
-
69,999
-
41,999
-
64,999
-
99,999
-
29,999
-
63,999
-
39,999
-
1,56,900
-
79,900
-
1,39,900
-
1,29,900
-
65,900
-
1,56,900
-
1,30,990
-
76,990
-
16,499
-
30,700
-
12,999
-
62,425
-
1,15,909
-
93,635
-
75,804
-
9,999
-
11,999
-
3,999
-
2,500
-
3,599
-
8,893