Denver, CO, July 17, 2007 – A recent independent study of 465 IT and business professionals has revealed that companies are having to deploy a costly and often complex mélange of security measures to keep their DNS (Domain Name Systems) protected from malicious attackers. Even so, many businesses remain vulnerable, as over half the respondents reported having fallen victim to some form of malware attack. Over one third had been hit by a denial-of-service attack while over 44 percent had experienced either a pharming or cache poisoning attack. Findings showed both external and internal DNS servers were equally vulnerable, as both types succumbed to attacks with roughly the same frequency.

Mazerov Research and Consulting – an international provider of technology and market research – conducted the study on behalf of Secure64 Software Corporation.

Internet Dependence

The findings underscore a disturbing trend as businesses are forced to find new ways to protect their IT infrastructure from Internet-based intrusions, yet are placing an incredibly high degree of dependency on continuous Internet connectivity. In this survey of businesses decision-makers, over half (54 percent) explained their companies are ‘totally or extremely dependent’ on uninterrupted Internet connectivity; another 26 percent said their company was very dependent.  Only 6 percent said their company was not very dependent on Internet connectivity. Growing business dependence on Internet connectivity is the very vulnerability that allows malware to attack DNS.

Reliability, Immunity, Availability Most Important

Not surprisingly, respondents placed a high premium on being able to count on their DNS to work consistently and to ward off potentially crippling attacks. When asked to name an essential or extremely important attribute of a DNS solution, the top five responses included:

• Reliability (67 percent)
• Immunity to exploits, rootkits and malware (54 percent)
• Availability during denial-of-service attacks (52 percent)
• Simple to manage (48 percent)
• Fast query responses – low latency/high performance (46 percent)

However, respondents admitted that trying to achieve these “must-have” DNS characteristics was challenging and required a significant investment in time, money and effort. Three-fourths of all respondents devote valuable resources to continuously patch their operating systems. Others reported having to harden operating systems, invest in dedicated firewalls, and add DNS appliances, DoS mitigation services and other network security devices. On average, respondents typically use at least 3.5 overlapping methods simultaneously to shore up their DNS security.

Downtime and Potential Damage, Loss

When asked how long their business could weather being taken offline before significant problems occurred, IT personnel were more sensitive to the issue than those occupying C-suites. According to the study, C-level executives estimated they could withstand losing Internet connectivity for just over two hours (126 minutes), whereas IT managers estimated it would only be 105 minutes before significant problems arose. Other IT personnel – who may be most directly responsible for maintaining Internet uptime – estimated an even shorter timeframe at an average of 72 minutes.

Respondents were also asked to assess what the likely impact would be on the health of their business if they were to experience a loss of Internet connectivity for a significant period of time. Maybe most alarming was 12 percent of participants claimed they would be extremely or somewhat likely to go out of business completely. Other responses included:

• Loss of productivity (74 percent)
• Unable to conduct the most basic business functions (54 percent)
• Loss of significant revenue (40 percent)
• Brand damage would suffer (39 percent)

When asked what the most catastrophic problem would be in the event of a major Internet disruption, 37 percent feared losing email whereas 47 percent identified the disruption of other Web-dependent services such as e-commerce, VOIP and customer support. Surprisingly, only 17 percent indicated that a failure of their DNS – the underlying system that makes email and other Web services possible – would be their most catastrophic problem.

“IT professionals are clearly facing a Sisyphean task when it comes to keeping their DNS secure,” stated Bob Mazerov, founder and principal of Mazerov Research. “What’s particularly interesting is that most respondents perceived the loss of email and other Web services as being a bigger problem than the loss of DNS. This suggests an enduring lack of focus, attention and awareness among IT and business professionals regarding the important and primary role DNS plays within the infrastructure of today’s Internet-dependent enterprise.”

 

About the Research Study

Mazerov Research & Consulting, LLC of Denver conducted the survey of IT professionals in February/March of 2007. The Internet-based survey was conducted online among 465 respondents nationwide, all with authority in their IT department and authority over DNS; among decision-makers across a breadth of industries from government to manufacturing to media and tourism; and included VARs, Integrators and ISPs.  Virtually all economic sectors were included.  The survey was also conducted across company size from under $1 million to over $250 million in revenue and from large and small IT staffs. A survey of 465 conducted using this method yields a margin of ± 4.5 percent.

Complete survey results are available on the Mazerov Research & Consulting Web site at www.mazerovresearch.com.

About Secure64

Headquartered in Greenwood Village, Colorado, Secure64 is a software developer providing secure, self-protecting, high performing server applications. Secure64’s core technology is SourceT®, a patented Genuinely Secure™ micro OS designed from the ground up to make the micro OS and any applications running on it immune from rootkits and malware, and resistant to network attacks. Unlike conventional operating systems with insecure architectures, SourceT does not need to be hardened, patched and protected to minimize exposure to vulnerabilities. By simplifying and consolidating network infrastructures, SourceT-based applications help IT professionals reduce the costs and risks from potential security breaches while achieving unparalleled levels of reliability and performance. For more information, visitwww.secure64.com.

About Mazerov Research & Consulting

Headquartered in Denver, Colorado, Mazerov Research and Consulting (MR&C) enables its clients to enter the market more effectively, garner market share more efficiently, and develop winning programs more economically through insightful, thoughtful use of marketing research and strategic consulting. We help our clients – small, medium and large companies in a broad range of industries – make better decisions, launch successful products and services, craft and execute more effective marketing and advertising programs, and support more effective sales programs.  Since 1993, MR&C has helped clients develop over $5 billion in new products, improved sales performance, and advertising programs.

 

Company Contacts

Mark Beckett

Vice President, Marketing

Secure64

(303) 242-5899

mark.beckett@secure64.com

Robert Mazerov

Founder & Principal

Mazerov Research & Consulting

(303) 741-2369

bobm@mazerovresearch.com

Press Contacts

Steve Herrmann
Trippe and Company
(303) 823-6132
sherrmann@trippecompany.com

Karla Trippe

Trippe and Company

(970) 468-1850

ktrippe@trippecompany.com

New Functionality Also Enables Companies to More Quickly Diagnose and Respond to Network Attacks, Protecting Network Bandwidth

GREENWOOD VILLAGE, CO – September 5, 2007 – Secure64 Software Corporation, a software developer with the only Genuinely Secure™ software technology and server applications, today announced it has incorporated two key new features into Secure64 DNS. The latest product features make it easier for IT managers to administer anycast DNS servers and obtain network attack characteristics that can be used to mitigate attacks upstream from the DNS servers.

“By incorporating these customer-driven features into Secure64 DNS, we have strengthened our leadership position in providing highly secure, self-protecting DNS server applications,” stated Mark Beckett, Vice President of Marketing, Secure64. “Secure64 DNS now extends its protection features beyond the DNS server itself, providing our customers with an even greater ability to implement more resilient infrastructures, increase their uptime and ensure greater business continuity.”

The new anycast feature in Secure64 DNS greatly simplifies the process of administering anycast DNS servers, especially where upstream routers are not under an administrator’s control. By eliminating the need to make router changes when anycast DNS servers need to be switched off for maintenance or taken offline completely, the anycast feature reduces administrative costs and headaches.

Anycast is a network addressing and routing scheme that allows multiple servers to share a common IP address, with data being routed to the nearest server as viewed by the routing topology. This technique improves performance and resiliency of many applications by routing requests to the nearest server, and by limiting the detrimental effects of a large network attack to a subset of the servers sharing an anycast IP address. The anycast approach is widely used by the Internet’s root server operators to provide extra DDoS resiliency and improve DNS performance.

The new attack notification feature in Secure64 DNS uses syslog and SNMP traps to provide real-time network attack characteristics that can be used to set filters on upstream networking and routing equipment. This allows organizations to respond faster to DNS attacks and keep their network connections from congesting with attack traffic. With the new attack notification feature, Secure64 DNS now helps to safeguard network bandwidth in addition to protecting the DNS server itself.

In addition to these two new features, Secure64 DNS now directly reads BIND configuration files, simplifying the deployment of the Secure DNS product into existing infrastructures by eliminating the need to convert configuration files.

By making it easy for organizations to adopt best practices like anycast, react quickly in the event of an attack, and deploy new technologies with minimal disruption to existing infrastructure, Secure64 greatly simplifies the task of creating a secure, highly available DNS infrastructure, which is viewed as an increasingly critical component of an organization’s network infrastructure.

“Transitioning to a utility-grade network means that the emphasis is no longer on layers 1 though 4 in the OSI stack. DNS is the new black art of networking, not routing,” wrote Robert Whiteley, Senior Analyst, Forrester Research, in the May 2007 report, Taking IT From a Commodity to a Utility. “Few companies do it well, and even fewer have the skill set to scale it; best practices are rarely documented, never mind automated.”

The latest product enhancements are available now and come standard with Secure64 DNS, offering customers even greater value at the product’s original competitive price point.

For more information on Secure64 DNS, visit www.secure64.com

About Secure64

Headquartered in Greenwood Village, Colorado, Secure64 is a software developer providing secure, self-protecting, high performing server applications. Secure64’s core technology is SourceT®, a patented Genuinely Secure™ micro OS designed from the ground up to make the micro OS and any applications running on it immune to rootkits and malware and resistant to network attacks. Unlike conventional operating systems with insecure architectures, SourceT does not need to be hardened, patched and protected to minimize exposure to vulnerabilities. By simplifying and consolidating network infrastructures, SourceT-based applications help IT professionals reduce the costs and risks from potential security breaches while achieving unparalleled levels of reliability and performance. For more information, visitwww.secure64.com.

Company Contact

Mark Beckett

Vice President, Marketing

Secure64

(303) 242-5899

mark.beckett@secure64.com

Press Contacts

Karla Trippe

Trippe and Company

(970) 468-1850

ktrippe@trippecompany.com

Rich Miller
Trippe and Company
(303) 539-6933
rmiller@trippecompany.com

Denver – July 30, 2008 – Secure64 Software Corporation has developed a product that dramatically simplifies the implementation and management of DNSSEC. Secure64 DNS Signer™ is the first and only product that addresses each of the obstacles that have slowed the widespread deployment of DNSSEC zone signing, including the need for simplicity, security, auditability and scalability. While recent patching efforts have mitigated the impact of the cache poisoning vulnerability identified by Dan Kaminsky and widely reported by the media, deployment of DNSSEC is widely regarded as the only viable long-term solution to securing the Domain Name System (DNS).

Domain Name System Security Extensions (DNSSEC) provides authentication of the origin of DNS data, assurance of data integrity, and authenticated denial of existence – the three elements necessary to increase the security of the Internet’s DNS infrastructure. With DNSSEC, internet users can know with certainty that they are at the correct site and that there is no man in the middle spying on them. Without DNSSEC there is a much higher risk of fraud, loss of confidentiality, and identity theft. FISMA Act encourages U.S. government agencies to configure their DNS servers to the DNSSEC security specifications set by the National Institute of Standards and Technology, and it has been reported that the federal government’s Office of Management and Budget (OMB) plans to begin enforcing DNSSEC requirements through an auditing process, setting the standard for DNS best practices. For more information about DNSSEC, visit www.dnssec-deployment.org.

The Secure64 DNS Signer:

• Deploys in days rather than months
• Automates all key management activity securely
• Offers compatibility with existing provisioning systems/slave architectures
• Scales to millions of records and hundreds of thousands of zones
• Supports highly dynamic environments with minimal signing latency
• Utilizes a Genuinely Secure, Trusted Computing Platform

“Organizations that have been working to deploy DNSSEC are frustrated by the amount of time required to understand and implement it correctly, securely and in a way that is repeatable. Early adopters often devote several months or more to deploy DNSSEC by integrating open source tools, scripts, cryptographic hardware and homegrown code. Then they have to devote significant IT resources to ongoing maintenance and administration. Secure64 DNS Signer addresses the market’s need for a simple yet secure approach to deploying DNSSEC” said Mark Beckett, vice president of marketing, Secure64.

Beckett added, “This product solves the biggest remaining technical hurdles to broad-scale deployment of DNSSEC in the industry: signing DNS zones quickly and easily while ensuring the signing keys aren’t compromised. Overcoming these hurdles marks a major milestone in helping secure the Internet infrastructure around the world.”

According to Olaf Kolkman, CEO of NLnet Labs and chair of the Internet Architecture Board, “DNS is used in almost every situation where users want to access a service somewhere on the Internet, and DNSSEC provides protection of that utility.”

Secure64 DNS Signer simplifies the complex process of DNSSEC zone signing by automating all key generation, key rollover, and zone signing and resigning processes, and reduces risk by eliminating signing errors that make network resources unreachable. Secure64 DNS Signer also addresses the need to scale to extremely large, dynamic environments by providing both incremental and bulk zone signing with extremely high signing performance.

“DNSSEC is a critical topic for top level domain registries wishing to enhance the security of their domain,” said Ram Mohan, Chief Technology Officer at Afilias, one of the leading registry services provider in the world supporting over 13 million domains. “Secure64 has designed a product that promises to be secure and reliable.  We look forward to evaluating their DNS Signer solution, which we anticipate will provide efficiency and cost savings in the DNSSEC rollout for the registries that Afilias supports.”

Secure64 DNS Signer is priced starting at $14,995 and will be available in September 2008. For additional information, contact Secure64 at (303) 242-5890 or visit www.secure64.com.

About Secure64 Software Corporation

Headquartered in Greenwood Village, Colorado, Secure64® is a software developer providing secure, self-protecting, high performing server applications. Secure64’s core technology is SourceT®, a patent pending Genuinely Secure™ micro OS designed from the ground up to make the micro OS and any applications running on it immune to rootkits and malware and resistant to network attacks. Unlike conventional operating systems with insecure architectures, SourceT does not need to be hardened, patched and protected to minimize exposure to vulnerabilities. For more information, visitwww.secure64.com.

 

Company Contact

Mark Beckett

Vice President, Marketing

Secure64

(303) 242-5899

mark.beckett@secure64.com

Press Contacts

Elisabeth Monaghan
Trippe and Company
(303) 514-8383
emonaghan@trippecompany.com

Rich Miller

Trippe and Company

(303) 539-6933

rmiller@trippecompany.com

DENVER, CO – November 25, 2008 – Secure64 Software Corporation announced today that it has signed an agreement with Webair, a premier Web hosting company, to deploy Secure64 DNS Authority across all of Webair’s data centers worldwide. Secure64 DNS Authority is authoritative name server software that will increase the availability and security of Webair’s DNS infrastructure, reduce its operational costs, and provide its customers with comprehensive protection against network threats such as malware and DoS attacks. Secure64 DNS Authority’s proven capability ensures that Webair’s DNS infrastructure will be immune to malware, always available, and able to withstand denial-of-service attacks while still responding to legitimate queries – unlike other DNS applications that fail during network attacks.

Webair Secures Infrastructure with Secure64 DNS Authority

“Webair is growing quickly and the rapidly increasing number of domains we host for customers put too much of a burden on our previous DNS solution. By using Secure64 DNS Authority, we not only have nearly unlimited scalability with 100% availability, we have also been able to save money by dramatically consolidating our DNS servers from 35 to 8,” said Sagi Brody, CTO of Webair. “The most important reason for selecting Secure64, though, is security. It ensures that our customers will be protected no matter what.”

“The traditional approach to protecting DNS infrastructure is inefficient. That approach, which requires hardening, patching and protecting the DNS with security devices is costly, time-intensive and ultimately ineffective,” said Steve Goodbarn, CEO and Director of Secure64. “By deploying Secure64 DNS Authority, Webair is securing its DNS infrastructure for the future and paving the way for continued growth of its business.”

About Secure64 DNS Authority

Secure64 DNS Authority delivers the security and availability required in today’s networks, without the cost and complexity of conventional solutions. Unlike “hardened” systems that require constant patching, maintenance, and investment to keep threats at bay, Secure64 DNS Authority is genuinely secure as a result of an architecture that is fully immune to compromise from rootkits and malware as well as completely resistant to network attacks. In addition, its high speed network I/O stack dramatically improves DNS query performance, allowing Secure64 DNS Authority to achieve over 100,000 queries per second, the highest performance of any authoritative name server.

Features and benefits of Secure64 DNS Authority include the following:

* Eliminates OS hardening and emergency vulnerability patching
* Eliminates the need for network security devices to protect DNS
* Responds to 100 percent of legitimate queries while under attack
* Remains available during restarts
* Consolidates DNS servers
* Is immune to rootkits and malware
* Supports DNSSEC

For more information about Secure64 DNS Authority, visit https://secure64.com/secure_dns.

About Webair

Webair (www.webair.com) provides affordable, managed web hosting solutions for companies of all types and sizes, including world-renowned musicians, manufacturers, media companies and professional services firms. Webair provides all of hardware, software and support necessary to meet their customers’ needs for co-location services, dedicated and virtual servers, content delivery networks, global load balancing, off-site backups and more. Webair operates its own fiber optic network and state-of-the-art datacenters located in New York, Los Angeles, Montreal and Amsterdam, and the company has a world-renowned reputation for providing the highly reliable Internet services.

About Secure64 Software Corporation

Headquartered in Greenwood Village, Colorado, Secure64® is a software developer providing secure, self-protecting, high performing server applications. Secure64’s core technology is SourceT®, a patent pending Genuinely Secure™ micro OS designed from the ground up to make the micro OS and any applications running on it immune to rootkits and malware and resistant to network attacks. Unlike conventional operating systems with insecure architectures, SourceT does not need to be hardened, patched and protected to minimize exposure to vulnerabilities.

SourceT applications such as Secure64 DNS Authority and Secure64 DNS Signer do not require protection from firewalls, intrusion prevention or DDoS mitigation devices. By simplifying and consolidating network infrastructures, Secure64 applications help IT professionals reduce costs and risks while achieving unparalleled levels of reliability and performance. For more information, visit www.secure64.com.