For Immediate Release

What Every Company Should Know (and Do) About Data Exfiltration

Greenwood Village, CO – May 22, 2018 – Secure64, the leading provider of Genuinely Secure DNS servers, comments on their new TunnelGuard™ feature and how it assists organizations to protect their proprietary data from theft.

Data exfiltration, the unauthorized transfer of data within or outside an organization’s computer network, has become a top priority for CISO’s around the world. Today, enterprises, government organizations, even non-profits are all concerned about an employee or contractor potentially leaking proprietary information. Many of these organizations believe by keeping email logs and history they can dissuade someone from sending company sensitive information from the network because by now all employees should know that their email history is kept on company servers for many months if not years.

Going further, many organizations have implemented further restrictions regarding the use of private email at work with some – especially in the defense sector — going as far to prohibit use of removable storage media in the work place.

And while these policies can protect organizations from basic data exfiltration – sophisticated end users can exploit vulnerabilities that exist in corporate networks. One such vulnerability, that Secure64 uniquely has closed, involves the Domain Name System or DNS.

Normally, DNS traffic carries queries and response information to allow computers, smart phones, and IoT devices to interoperate over the Internet. In 2005, Dan Kaminsky created the OzymanDNS program to demonstrate that DNS could also be used to carry (tunnel) other protocol information, such as TCP/IP. Since then, numerous implementations of these DNS tunnels have appeared.

The challenge with DNS tunnels is “bad actors” can use them to send data without being monitored or restricted by normal network protections. For mobile network operators, this means subscribers armed with widely available apps can exploit DNS tunnels to bypass their data caps. For enterprises, DNS tunnels are a ready pathway for data exfiltration.

Using available bypass apps or utilities, a relatively un-sophisticated user can send proprietary data over a DNS tunnel. DNS tunnels can also be used by malware to transmit data from infected devices to “home”. Many IT organizations would find it hard to demonstrate to their C-levels that they actively monitor DNS tunnels for data exfiltration. That is until today.

Secure64’s Tunnel Detection Module (TDM), marketed as TunnelGuard, is an active, integrated feature of our DNS platform that allows IT organizations to ensure that the traffic sent over DNS are strictly and exclusively legitimate DNS messages.

TunnelGuard effectively blocks a non-authorized use of the DNS tunnel, thereby, eliminating a pathway for data exfiltration. Secure64 engineers and data scientists have created patent-pending algorithms that inspect DNS messages, guaranteeing that only legitimate DNS traffic through the caching server.

The cost of TunnelGuard in comparison to a potential data breach is negligible and the technical staff required to implement this safeguard is lightweight.

“Many customers we speak to – carriers, government agencies and enterprises – react by saying ‘We had no idea this vulnerability existed, but now that we do — we plan to close it immediately’” said Thad Dupper, President & CEO, Secure64. “Whether its protecting a carrier from revenue leakage from subscribers bypassing data caps or enterprises and government agencies wanting to ensure no one can pass data over a DNS tunnel – either use case represents a strong reason to adopt our TunnelGuard feature.”

Defense contractors, financial institutions, government agencies, healthcare providers as well as any enterprise looking to secure their data should learn more about TunnelGuard. For more information regarding TunnelGuard please contact us sales@secure64.com.

About Secure64 Software Corporation

Secure64 brings trust to the internet through its suite of purpose-built, secure, DNS-based network security products. The company was built on a foundation of security and has forged solutions that are self-protecting and immune to malware. Secure64 secures the DNS infrastructures of leading service providers, government agencies and enterprises globally.

Secure64 is a privately held company founded by technology and financial veterans and boasts deep technical and global experience in its leadership and staff. It is the only DNS solution provider that has authored a secure micro OS, automated the deployment of DNSSEC and built self-protecting DNS servers. For more information, visit www.secure64.com

Mark Beckett

Secure64 Software Corporation
303-242-5900
mark.beckett@www.secure64.com
www.secure64.com

For Immediate Release

Secure64 Releases TunnelGuard™ to detect and block DNS tunnels

Solution prevents bandwidth piracy and data exfiltration

Greenwood Village, CO – April 11, 2018 – Secure64, the leading provider of Genuinely Secure DNS servers, today announced the release of Secure64® TunnelGuard™, a new member of its DNS Guard™ family of security services, which enables service providers to prevent bandwidth piracy and data exfiltration from DNS tunneling.

“Our new TunnelGuard service prevents illegitimate uses of the DNS tunnels that can erode service providers’ data revenues and create risk of brand damage,” said Thad Dupper, CEO of Secure64. “Today service providers need to contend with an ever-growing cast of bad actors who look to steal data bandwidth by exploiting DNS tunnels. Going beyond bandwidth theft, DNS tunnels can also be misappropriated by attackers to exfiltrate stolen information which can put subscriber personal data at risk. For this reason, technologies to “Block Tunnels” are sometimes a regulatory requirement imposed on ISP’s.  TunnelGuard represents a cost-effective and comprehensive solution to all of these threats.”

TunnelGuard is an on-box security service that automatically detects and blocks many different types of DNS tunnels in real-time with minimal impact on performance and a high degree of accuracy. TunnelGuard is delivered through Secure64® DNS Cache™, while Secure64 DNS Manager provides detailed reports on tunnel activity in the network.

TunnelGuard is available immediately.

About Secure64 Software Corporation

Secure64 brings trust to the internet through its suite of purpose-built, secure, DNS-based network security products. The company was built on a foundation of security and has forged solutions that are self-protecting and immune to malware.  Secure64 secures the DNS infrastructures of leading service providers, government agencies and enterprises globally.

Secure64 is a privately held company founded by technology and financial veterans and boasts deep technical and global experience in its leadership and staff.  It is the only DNS solution provider that has authored a secure micro OS, automated the deployment of DNSSEC and built self-protecting DNS servers. For more information, visit www.secure64.com

Theresa DeGroote
Secure64 Software Corporation
303-242-5900
Theresa.DeGroote@secure64.com
www.secure64.com

For immediate release

Secure64 PipeProtector™ Defends Against Amplified DDoS Attacks

Greenwood Village, CO–  March 2, 2018- Secure64, the leading provider of Genuinely Secure DNS servers, today announced that Secure64® DNS Authority™ servers help protect the network against UDP-based amplified attacks, including those recently discovered by US-CERT.

Amplified attacks threaten the availability of a network, as they send more traffic through the network thnt it is capable of processing. When network capacity is exceeded, all applications on the network are crippled.

“This week US-CERT released a warning about exploiting memcache to create UDP-based amplified attacks with very high amplification factors.” says Thad Dupper, President & CEO, Secure64. “We anticipated the rise of distributed denial of service attacks from the founding of our company, and our DNS servers were designed from the ground up to mitigate those attacks.  Several years ago, we anticipated that amplified attacks would grow in scope, so we developed Secure64 PipeProtector.™ PipeProtector monitors inbound bandwidth consumption and when it exceeds normal levels, PipeProtector can notify the upstream router to blackhole traffic from abusive clients, a best practice that is known as Remotely Triggered Blackhole and which is recommended by US-CERT to defend against amplified attacks.  This helps to defeat the objective of the attacker, which is to take down the network. Not only is the DNS protected, but other servers on the same network are as well.”

PipeProtector is available on Secure64 DNS Authority for no additional charge.

About Secure64 Software Corporation

Secure64 brings trust to the internet through its suite of purpose-built, secure, DNS-based network security products. The company was built on a foundation of security and has forged solutions that are self-protecting and immune to malware.  Secure64 secures the DNS infrastructures of leading service providers, government agencies and enterprises globally.

Secure64 is a privately held company founded by technology and financial veterans and boasts deep technical and global experience in its leadership and staff.  It is the only DNS solution provider that has authored a secure micro OS, automated the deployment of DNSSEC and built self-protecting DNS servers. For more information, visit www.secure64.com

Theresa DeGroote
Secure64 Software Corporation
303-242-5900
Theresa.DeGroote@secure64.com
www.secure64.com

Secure64 Brings On-Demand DNS Capabilities to Tier 1 US Telco

Greenwood Village, CO –  January 24, 2018- Secure64, the leading provider of Genuinely Secure DNS servers, today announced that a Tier 1 US wireless carrier will deploy NFV-enabled Secure64 DNS servers in their core network as part of their IMS architecture.

“The US Tier 1 wireless carrier will be deploying our DNS Authority servers as part of an overall IMS implementation,” said Thad Dupper, President & CEO, Secure64.   “Tested widely in the Tier 1’s lab, our solution will provide the scalability, security and on demand capacity needed to meet this carrier’s expanding core network requirements. “

The Secure64 NFV-enabled DNS platform will integrate with one of the company’s North American partner’s IP Multimedia Subsystem (IMS) solution. This solution will replace the carrier’s legacy circuit switches with IP switches nationwide with DNS as a key component. The partner selected Secure64 for its core DNS because of its proven high performance and industry-leading security.

About Secure64 Software Corporation

Secure64 brings trust to the internet through its suite of purpose-built, secure, DNS-based network security products. The company was built on a foundation of security and has forged solutions that are self-protecting and immune to malware.  Secure64 secures the DNS infrastructures of leading service providers, government agencies and enterprises globally.

Secure64 is a privately held company founded by technology and financial veterans and boasts deep technical and global experience in its leadership and staff.  It is the only DNS solution provider that has authored a secure micro OS, automated the deployment of DNSSEC and built self-protecting DNS servers. For more information, visit www.secure64.com

Theresa DeGroote
Secure64 Software Corporation
303-242-5900
Theresa.DeGroote@secure64.com
www.secure64.com