For Immediate Release:

Secure64, Leading Provider of Secure DNS Solutions, Comments on Yesterday’s DDoS Attacks

Greenwood Village, CO – June 28, 2018 – Secure64, the leading provider of Genuinely Secure DNS servers, comments on yesterday’s distributed denial of service attacks (DDoS).

As a leading provider of secure DNS systems, Secure64 understands the impact DDoS attacks can have on enterprises, government agencies as well as carriers’ networks.

Drawing on our over sixteen years of experience in the cyber and DNS sector Secure64 wishes to share what we have come to identify as DNS best practices with the goal that other organizations will benefit from our experience.

When it comes to protecting an organization’s DNS from cyber-attacks the most important element of safety is DIVERSITY. This diversity, as a best practice, includes having diversity across all elements of the solution.

HARDWARE DIVERSITY

Secure64 stands alone as the only provider of DNS solutions that offers hardware level diversity. Secure64 offers both x86 and Itanium-based hardware DNS implementations. Best practice includes having a diverse mix of hardware underlying the DNS service. Recently there was much press given to the x86 hardware vulnerabilities called Meltdown and Spectre – these exposures only exist on the x86-based servers. Itanium servers, by virtue of their different architecture, are immune to these problems.

OPERATING SYSTEM DIVERSITY

Secure64 is the only provider of DNS solution to offer diversity at the OS level. Our proprietary SourceT® operating system runs exclusively on Itanium servers. The protection SourceT offers is unique in the industry. Our x86-based platform runs SecureOS™, the Secure64 operating system built on a highly-secure Linux kernel.

APPLICATION DIVERSITY

We have varying DNS application code bases that run across our LINUX and SourceT platforms, providing added protection against malware and attack vectors. Neither of these applications uses the BIND code base.

DDoS DIVERSITY

Secure64 has implemented multiple layers of protections against DDoS attacks on our platforms. These protections provide layers of security that protect not only the DNS application but also the network itself from floods, amplified and reflected attacks.

SUMMARY

“We speak with carriers and enterprises every day that share with us how important network availability is to their operations and brands. Secure64 represents the only DNS provider that offers diversity at the hardware, operating system and application layer – we are totally unique in providing this level of redundancy and reliability. This is a critical differentiator, especially as the industry migrates to the cloud and virtual environments,” said Thad Dupper, President & CEO, Secure64.

Secure64 customers will realize the benefits of full diversity for both their DNS Resolvers and Authority servers while having a consistent and integrated management capability provided by Secure64® DNS Manager™, all provided from a single vendor, simplifying their supplier management challenges.

About Secure64 Software Corporation

Secure64 brings trust to the internet through its suite of purpose-built, secure, DNS-based network security products. The company was built on a foundation of security and has forged solutions that are self-protecting and immune to malware. Secure64 secures the DNS infrastructures of leading service providers, government agencies and enterprises globally.

Secure64 is a privately held company founded by technology and financial veterans and boasts deep technical and global experience in its leadership and staff. It is the only DNS solution provider that has authored a secure micro OS, automated the deployment of DNSSEC and built self-protecting DNS servers. For more information, visit

secure64.com

Mark Beckett
Secure64 Software Corporation
303-242-5900
Mark.Beckett@secure64.com
secure64.com

For Immediate Release

What Every Company Should Know (and Do) About Data Exfiltration

Greenwood Village, CO – May 22, 2018 – Secure64, the leading provider of Genuinely Secure DNS servers, comments on their new TunnelGuard™ feature and how it assists organizations to protect their proprietary data from theft.

Data exfiltration, the unauthorized transfer of data within or outside an organization’s computer network, has become a top priority for CISO’s around the world. Today, enterprises, government organizations, even non-profits are all concerned about an employee or contractor potentially leaking proprietary information. Many of these organizations believe by keeping email logs and history they can dissuade someone from sending company sensitive information from the network because by now all employees should know that their email history is kept on company servers for many months if not years.

Going further, many organizations have implemented further restrictions regarding the use of private email at work with some – especially in the defense sector — going as far to prohibit use of removable storage media in the work place.

And while these policies can protect organizations from basic data exfiltration – sophisticated end users can exploit vulnerabilities that exist in corporate networks. One such vulnerability, that Secure64 uniquely has closed, involves the Domain Name System or DNS.

Normally, DNS traffic carries queries and response information to allow computers, smart phones, and IoT devices to interoperate over the Internet. In 2005, Dan Kaminsky created the OzymanDNS program to demonstrate that DNS could also be used to carry (tunnel) other protocol information, such as TCP/IP. Since then, numerous implementations of these DNS tunnels have appeared.

The challenge with DNS tunnels is “bad actors” can use them to send data without being monitored or restricted by normal network protections. For mobile network operators, this means subscribers armed with widely available apps can exploit DNS tunnels to bypass their data caps. For enterprises, DNS tunnels are a ready pathway for data exfiltration.

Using available bypass apps or utilities, a relatively un-sophisticated user can send proprietary data over a DNS tunnel. DNS tunnels can also be used by malware to transmit data from infected devices to “home”. Many IT organizations would find it hard to demonstrate to their C-levels that they actively monitor DNS tunnels for data exfiltration. That is until today.

Secure64’s Tunnel Detection Module (TDM), marketed as TunnelGuard, is an active, integrated feature of our DNS platform that allows IT organizations to ensure that the traffic sent over DNS are strictly and exclusively legitimate DNS messages.

TunnelGuard effectively blocks a non-authorized use of the DNS tunnel, thereby, eliminating a pathway for data exfiltration. Secure64 engineers and data scientists have created patent-pending algorithms that inspect DNS messages, guaranteeing that only legitimate DNS traffic through the caching server.

The cost of TunnelGuard in comparison to a potential data breach is negligible and the technical staff required to implement this safeguard is lightweight.

“Many customers we speak to – carriers, government agencies and enterprises – react by saying ‘We had no idea this vulnerability existed, but now that we do — we plan to close it immediately’” said Thad Dupper, President & CEO, Secure64. “Whether its protecting a carrier from revenue leakage from subscribers bypassing data caps or enterprises and government agencies wanting to ensure no one can pass data over a DNS tunnel – either use case represents a strong reason to adopt our TunnelGuard feature.”

Defense contractors, financial institutions, government agencies, healthcare providers as well as any enterprise looking to secure their data should learn more about TunnelGuard. For more information regarding TunnelGuard please contact us sales@secure64.com.

About Secure64 Software Corporation

Secure64 brings trust to the internet through its suite of purpose-built, secure, DNS-based network security products. The company was built on a foundation of security and has forged solutions that are self-protecting and immune to malware. Secure64 secures the DNS infrastructures of leading service providers, government agencies and enterprises globally.

Secure64 is a privately held company founded by technology and financial veterans and boasts deep technical and global experience in its leadership and staff. It is the only DNS solution provider that has authored a secure micro OS, automated the deployment of DNSSEC and built self-protecting DNS servers. For more information, visit www.secure64.com

Mark Beckett

Secure64 Software Corporation
303-242-5900
mark.beckett@www.secure64.com
www.secure64.com

For Immediate Release

Secure64 Releases TunnelGuard™ to detect and block DNS tunnels

Solution prevents bandwidth piracy and data exfiltration

Greenwood Village, CO – April 11, 2018 – Secure64, the leading provider of Genuinely Secure DNS servers, today announced the release of Secure64® TunnelGuard™, a new member of its DNS Guard™ family of security services, which enables service providers to prevent bandwidth piracy and data exfiltration from DNS tunneling.

“Our new TunnelGuard service prevents illegitimate uses of the DNS tunnels that can erode service providers’ data revenues and create risk of brand damage,” said Thad Dupper, CEO of Secure64. “Today service providers need to contend with an ever-growing cast of bad actors who look to steal data bandwidth by exploiting DNS tunnels. Going beyond bandwidth theft, DNS tunnels can also be misappropriated by attackers to exfiltrate stolen information which can put subscriber personal data at risk. For this reason, technologies to “Block Tunnels” are sometimes a regulatory requirement imposed on ISP’s.  TunnelGuard represents a cost-effective and comprehensive solution to all of these threats.”

TunnelGuard is an on-box security service that automatically detects and blocks many different types of DNS tunnels in real-time with minimal impact on performance and a high degree of accuracy. TunnelGuard is delivered through Secure64® DNS Cache™, while Secure64 DNS Manager provides detailed reports on tunnel activity in the network.

TunnelGuard is available immediately.

About Secure64 Software Corporation

Secure64 brings trust to the internet through its suite of purpose-built, secure, DNS-based network security products. The company was built on a foundation of security and has forged solutions that are self-protecting and immune to malware.  Secure64 secures the DNS infrastructures of leading service providers, government agencies and enterprises globally.

Secure64 is a privately held company founded by technology and financial veterans and boasts deep technical and global experience in its leadership and staff.  It is the only DNS solution provider that has authored a secure micro OS, automated the deployment of DNSSEC and built self-protecting DNS servers. For more information, visit www.secure64.com

Theresa DeGroote
Secure64 Software Corporation
303-242-5900
Theresa.DeGroote@secure64.com
www.secure64.com

For immediate release

Secure64 PipeProtector™ Defends Against Amplified DDoS Attacks

Greenwood Village, CO–  March 2, 2018- Secure64, the leading provider of Genuinely Secure DNS servers, today announced that Secure64® DNS Authority™ servers help protect the network against UDP-based amplified attacks, including those recently discovered by US-CERT.

Amplified attacks threaten the availability of a network, as they send more traffic through the network thnt it is capable of processing. When network capacity is exceeded, all applications on the network are crippled.

“This week US-CERT released a warning about exploiting memcache to create UDP-based amplified attacks with very high amplification factors.” says Thad Dupper, President & CEO, Secure64. “We anticipated the rise of distributed denial of service attacks from the founding of our company, and our DNS servers were designed from the ground up to mitigate those attacks.  Several years ago, we anticipated that amplified attacks would grow in scope, so we developed Secure64 PipeProtector.™ PipeProtector monitors inbound bandwidth consumption and when it exceeds normal levels, PipeProtector can notify the upstream router to blackhole traffic from abusive clients, a best practice that is known as Remotely Triggered Blackhole and which is recommended by US-CERT to defend against amplified attacks.  This helps to defeat the objective of the attacker, which is to take down the network. Not only is the DNS protected, but other servers on the same network are as well.”

PipeProtector is available on Secure64 DNS Authority for no additional charge.

About Secure64 Software Corporation

Secure64 brings trust to the internet through its suite of purpose-built, secure, DNS-based network security products. The company was built on a foundation of security and has forged solutions that are self-protecting and immune to malware.  Secure64 secures the DNS infrastructures of leading service providers, government agencies and enterprises globally.

Secure64 is a privately held company founded by technology and financial veterans and boasts deep technical and global experience in its leadership and staff.  It is the only DNS solution provider that has authored a secure micro OS, automated the deployment of DNSSEC and built self-protecting DNS servers. For more information, visit www.secure64.com

Theresa DeGroote
Secure64 Software Corporation
303-242-5900
Theresa.DeGroote@secure64.com
www.secure64.com