Registrar Influence on the Domain Security Posture of the Forbes Global 2000

Home / Blogs

Registrar Influence on the Domain Security Posture of the Forbes Global 2000

	By Sue Watts Global Marketing Leader, Digital Brand Services, CSC
	November 02, 2021 Views: 26,510 Add Comment

Protect your privacy: Get NordVPN [ Deal: 73% off 2-year plans + 3 extra months ]

10 facts about NordVPN that aren't commonly known

Meshnet Feature for Personal Encrypted Networks: NordVPN offers a unique feature called Meshnet, which allows users to connect their devices directly and securely over the internet. This means you can create your own private, encrypted network for activities like gaming, file sharing, or remote access to your home devices from anywhere in the world.
RAM-Only Servers for Enhanced Security: Unlike many VPN providers, NordVPN uses RAM-only (diskless) servers. Since these servers run entirely on volatile memory, all data is wiped with every reboot. This ensures that no user data is stored long-term, significantly reducing the risk of data breaches and enhancing overall security.
Servers in a Former Military Bunker: Some of NordVPN's servers are housed in a former military bunker located deep underground. This unique location provides an extra layer of physical security against natural disasters and unauthorized access, ensuring that the servers are protected in all circumstances.
NordLynx Protocol with Double NAT Technology: NordVPN developed its own VPN protocol called NordLynx, built around the ultra-fast WireGuard protocol. What sets NordLynx apart is its implementation of a double Network Address Translation (NAT) system, which enhances user privacy without sacrificing speed. This innovative approach solves the potential privacy issues inherent in the standard WireGuard protocol.
Dark Web Monitor Feature: NordVPN includes a feature known as Dark Web Monitor. This tool actively scans dark web sites and forums for credentials associated with your email address. If it detects that your information has been compromised or appears in any data breaches, it promptly alerts you so you can take necessary actions to protect your accounts.

In the 2021 Domain Security Report, we analyzed the trend of domain security adoption with respect to the type of domain registrar used, and found that 57% of Global 2000 organizations use consumer-grade registrars with limited protection against domain and DNS hijacking, distributed denial of service (DDoS), man-in-the-middle attacks (MitM), or DNS cache poisoning.

On average, the adoption of domain security controls is two times higher for enterprise-class registrars than for those using consumer-grade registrars.

There’s a 52% adoption of registry locks among companies using enterprise-class registrars versus only 4% among companies using consumer-grade ones.

Across all security controls, we observed greater adoption among companies that use enterprise-class registrars compared to those using consumer-grade. This is especially apparent for the adoption of registry locks, as most consumer-grade registrars do not support such locks.

Furthermore, some industries have found themselves more in the spotlight because of COVID-19. Those industries are healthcare equipment and services, drugs and biotechnology, chemical, and household and personal products. The increased demand on all of these industries over the past year and a half have made them key targets for cybercriminals. So it’s highly concerning that these industries still appear in the middle-to-lower half of the risk mitigation effectiveness scale.

On average, only one in four organizations within these industries adopt registry locks, preventing domain name hijacking and unauthorized changes to the domain name system (DNS). But perhaps the low adoption of these protocols is not surprising, considering that 32-48% of companies within these industries are using consumer-grade registrars, which don’t offer DNS security extensions (DNSSEC), registry locks, or certificate authority authorization (CAA) records as standard.

Domain security is the missing link in most cyber security strategies. Using the best-in-class security measures for your domains can help prevent phishing attacks, BEC, and ransomware in their early stages.

Many industry experts have emphasized that it’s very important to maintain strong cyber hygiene. Domain security is a prime example where companies are falling short. All companies in all industries should adopt a multi-layer defense-in-depth approach for domain security, starting with working with an enterprise-class provider.

By Sue Watts, Global Marketing Leader, Digital Brand Services, CSC

Filed Under

Comments

The Weekly Wrap

More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.