FCC, ISPs Join Forces to Fight Routing Hijacks, Botnets
March 26, 2012 1:51 PM
Coalition will also work to secure DNS servers
Comcast Corp. (
), Time Warner Cable, Inc. (
), AT&T, Inc. (
), Cox Communications, CenturyLink, Inc. (
), Deutsche Telekom AG's (
) subsidiary T-Mobile USA, and Verizon Communications Inc. (
) and Vodafone Group Plc.'s (
) joint cellular venture, Verizon Wireless, at a special meeting in Washington D.C. all agreed to join forces with the
U.S. Federal Communications Commission
Communications, Security, Reliability and Interoperability Council
(CSRIC) in policing the internet.
I. DDOS Blockade -- a Thorny Issue
policing the internet
" is typically associated with the ISPs' volunteer efforts to combat copyright infringement (which in ISP eyes brings legal risks and extra bandwidth use), the new effort deals with fighting aggressors who look to exploit routing to destructive ends.
One issue the coalition will look to combat is botnets. A botnet is formed when malware infects thousands of computers, giving a
distributed platform controlled from a central command and control (CnC) server
. A botnet is a powerful tool. A large botnet can
take down many webpages
simply by ordering all its controlled machines to visit the target page, overloading it with traffic. At the same time, they can be employed in more sophisticated for-profit crime, such as
sending spam email
Microsoft Corp. (
) has joined with law enforcement to
take down several top botnets
in the last year. Its approach has focused on "decapitating" the botnet by locating and killing the CnC server. But many feel that ISPs could help cut off the greater body of botnets at their source, given that they have access to data that could be used to identify and target solutions at infected machines.
Together the ISPs and feds have crafted a guiding document titled "Anti-Bot Code of Conduct."
With regard to distributed denial of service (DDOS) attacks, where things could get interesting is in the case where individual non-infected users commit a mass attack. In such cases the attack can closely resemble a botnet-driven DDOS attack. In such a case ISPs could step in and kill the attackers' internet connections -- either thinking or claiming them to be part of a botnet.
New policies could make it harder for
to engage in DDOS webpage takedowns.
[Image Source: Jason Mick/DailyTech]
While many would feel that cutting off
this weapon used by
and others would be a great thing, others feel that eliminating non-malware DDOS campaigns would be akin to
silencing public protest
. Some view DDOS attacks by users as a digital equivalent of a sit-in/strike and view countermeasures as totalitarian.
II. Protecting DNS, Fighting Routing Hijacks
A second issue considered by the coalition is routing hijacks. The issue gained notice when millions of connections were
"accidentally" routed through Chinese servers
last year. While China claimed it was an innocent glitch, some saw it as a concerted hijacking effort. By redirecting traffic through its servers, an aggressor nation could potentially glean valuable bits of intelligence, by decreasing its difficulty in intercepting conversations. While sophisticated secure channels typically keep track of the delay between connections and thus would shut off in such a scenario, such loss of secure links could prove almost as bad as their compromise.
Bundled with the second issue is the third issue of
vulnerabilities to the domain name system (DNS)
, the databases that associate websites' text-string URL representation with specific numeric internet protocol addresses. Domain hijacking via DNS attacks remains a popular method of hacking, and in some cases hackers have taken down entire DNS server blocks.
Domain hijacking and traffic rerouting can raise serious threats to national security online. [Image Source: Chris Woebken/Flickr]
The FCC and some others have advocated a new protocol dubbed DNSSEC ("Domain Name System Security Extensions"), but the coalition shied away from accepting that effort. The key point of contention is that the new protocol would expose all the domains within a particular host, which would give attackers a virtual laundry list of who to attack.
Standards committees are working to address this major security flaw, but a robust solution has not yet been fully realized.
In the meantime, the coalition hopes to push browser-makers to do a better job monitoring DNS antics, and protecting users from visiting known hostile domains.
Together, the ISPs and FCC's DNS/routing pact is dubbed "the DNS code of conduct".
The two pacts are not without their controversies (most notably, the possibility of the anti-botnet provisions being used as a tool to suppress public protest via DDOS). However, for the average user, these efforts may help cut your spam burden and cut down on the danger of getting your system unwitting hijacked.
FCC [press release]
[meeting notice; PDF]
"I'm an Internet expert too. It's all right to wire the industrial zone only, but there are many problems if other regions of the North are wired." -- North Korean Supreme Commander Kim Jong-il
Verizon, TWC, and Comcast to Play "Copyright Cop" for the RIAA
March 16, 2012, 12:31 PM
Megaupload is Megapwned by Gov't, Anonymous Hits Back, Downs DOJ Homepage
January 19, 2012, 9:34 PM
New York Stock Exchange Hack Attack Fizzles
October 11, 2011, 9:35 AM
GPU Roaring? You May Be Infected With a Bitcoin Trojan Says Symantec
August 17, 2011, 4:47 PM
Microsoft Says Any Botnet Can be Decapitated, Destroyed
July 10, 2011, 2:20 PM
Google plans ultra-fast wireless Internet for Research Triangle Park, N.C.
August 12, 2016, 6:30 AM
Twitter Senior VP: "Diversity is Important, But We Can’t Lower the Bar"
November 9, 2015, 9:59 AM
CNN Resorts to Internet Censorship to Promote Clinton Over Senator Sanders
October 15, 2015, 2:47 PM
Breaking Bad: How to Crash Google's Chrome Browser With Just 8 Characters
September 23, 2015, 11:08 AM
Quick Note: Amazon UK Offers £10 Back on Any Order £50 or Over
August 3, 2015, 12:05 PM
Editorial: Reddit Allows Itself to be Hijacked as a Hate Platform For Racist Bigots
July 21, 2015, 6:32 PM
Most Popular Articles
Car Insurance - The Hidden Discriminatory Practise
October 18, 2016, 5:00 AM
Tesla Announces Level 5 Autonomous Driving
October 19, 2016, 8:30 PM
Apple iOS Contains Secret One-handed Keyboard Code
October 22, 2016, 5:00 AM
Thieves Love iPhones – More than $13,000 Stolen from Apple Store
October 21, 2016, 7:13 AM
Do you hate to do yard work?
October 20, 2016, 5:00 AM
Latest Blog Posts
Key EpiPen Competitor Out in 2017 At ' Very Low' Cost
Oct 27, 2016, 5:30 AM
Researchers use CRISPR to Accelerate Search for HIV Cure
Oct 26, 2016, 5:00 AM
Medical Council of India Makes Generic Medicines Mandatory
Oct 25, 2016, 5:00 AM
MacBoo Pro 2016: Release date Oct. 27
Oct 24, 2016, 7:16 AM
Mac Users, Try this if Your Mac is Infected?
Oct 23, 2016, 7:00 AM
Tips to Prevent Smartphones From Overheating:
Oct 22, 2016, 5:00 AM
Nasa Flies Drones at Nevada Airport
Oct 21, 2016, 8:21 AM
T-Mobile Data Problems
Oct 20, 2016, 10:17 AM
Annoying Apple Watch Problems and How to Fix Them
Oct 20, 2016, 5:00 AM
Your Mail May Soon Be Delivered By Robot
Oct 19, 2016, 9:34 AM
2018 Jeep Wrangler Prototype Sells At Junkyard
Oct 18, 2016, 5:00 AM
Samsung Shines with Gold Edition Tablet
Oct 17, 2016, 9:24 AM
Tesla Hints Mysterious Product Debut for October 17th
Oct 16, 2016, 10:14 AM
Samsung Galaxy Note 7 Phones on US flights
Oct 15, 2016, 5:00 AM
Comcast Fined $2.3 Million For Unconfirmed Services Charged To Customers
Oct 14, 2016, 5:00 AM
“American singer / songwriter “Bob Dylan is awarded 2016 Nobel Prize in Literature.
Oct 13, 2016, 10:33 AM
Battery Defect in Medical Device
Oct 12, 2016, 5:00 AM
More Blog Posts
Copyright 2016 DailyTech LLC. -
Terms, Conditions & Privacy Information