FISMA Focus: Continuously Monitoring the Cyber-Levee

NIST's release of their initial public draft of SP 800-137, Guide for Continuous Monitoring of Information Systems and Organizations will create a set of challenges for the federal cybersecurity community. Agencies and contractors will need to shape the document through the multi-stage revision process while continuing to implement their own continuous monitoring measures. more

In a Rare Meeting, Huawei Founder Addresses Concerns Over Tech Giant Spying for Chinese Government

In a rare meeting, Ren Zhengfei the founder of the Chinese tech giant Huawei assured foreign reporters that his company would refuse to disclose secrets about its customers and their communication networks. more

NANOG’s Edward Mc Nair to Deliver Keynote Address at CaribNOG 17 in April

Edward Mc Nair will deliver the keynote address at the next regional meeting of the Caribbean Network Operators Group (CaribNOG), to be held in Bridgetown, Barbados from April 10 to 12. The featured talk will take place on Thursday 11 April at 9 am AST. A live netcast will be available. Mc Nair is the Executive Director of the North American Network Operators Group (NANOG). more

Practical Pointers for Paring Domain Name Portfolios

As we enter the new normal, many legal departments have already begun looking for ways to reduce spend even as they are being asked to register COVID-19 domains. IP maintenance fees for patents, trademarks and domains are a natural place to start. While paring back patent and trademark portfolios can yield some significant savings, it's well-known that most corporate domain name portfolios contain registrations that are no longer needed. more

Trump Administration Doubles Down on Surveillance

The White House has expressed its full support on the need for permanent reauthorization of Section 702, created "to address an intelligence-collection gap that resulted from the evolution of technology in the years after FISA became law in 1978." more

When a ‘Response Fee’ is Required in a URS Case

Although filing fees in domain name disputes are usually paid for by the trademark owner that files a complaint, the Uniform Rapid Suspension System (URS) contains a little-noticed provision that, in large cases, requires the domain name registrant to pay a fee to defend itself. The so-called "Response Fee" is only required in URS cases that include 15 or more disputed domain names. more

Reducing the Risks of BYOD with DNS-Based Security Intelligence; Part 2: Taking Control

In part 1, I talked about some of the risks associated with BYOD. But there are actions you can take to greatly reduce this risk. One effective method for limiting the risk of BYOD is to employ DNS-based security intelligence techniques. DNS-based security intelligence makes use of an enterprise's caching DNS server to monitor and block DNS queries to known botnet command and control (C&C) domains. more

Fed Records Indicate Over 50 Cybersecurity Breaches Since 2011, Some Flagged as “Espionage”

The cybersecurity reports, which represent only a slice of all cyber attacks on the Fed, were obtained by Reuters through a Freedom of Information Act request. more

How Bubbles Decide Elections

The victory of Trump left the world perplexed, it did not take long to appear texts blaming Facebook and its bubble for the unexpected result. The "bubble", a theme that circulated more for the academic and technical spheres gained an unusual popularity in the last days, never saw so many texts on the subject published in such a short space of time, and in the recognized spaces of global journalism. more

Collaboration: A Means to Boost Enterprise Network Protection

In an age where cyber threats and attacks have reached a point of ubiquity, managing your organization's network security single-handedly may no longer be sufficient. The increasing volume and sophistication of threats, not to mention the continuous advancement in attack tools and their perpetrators' skills and know-how, has led to concerns on whether potential targets can keep up. more

Experts Concerned Over Looming Security Risks of Ultrasonic Cross-Device Tracking

In the upcoming Black Hat London presentation, security researcher from University College London, Vasilios Mavroudis and colleagues are going to describe and demonstrate the practical security and privacy risks that arise with the adoption systems enabled with ultrasonic cross-device tracking (uXDT). more

Looking at Centrality in the DNS

The Internet's Domain Name System undertakes a vitally important role in today's Internet. Originally conceived as a human-friendly way of specifying the location of the other end of an Internet transaction, it became the name of a service point during the transition to a client/server architecture. A domain name was still associated with an IP address, but that 1:1 association was weakened when we started adjusting to IPv4 address exhaustion. more

Over 5000 .BANK Domain Names Registered by U.S. Banks

fTLD Registry Services, the operator of .BANK top-level domain, reports that nearly seven months after .BANK launched, U.S. banks are continuing to register domain names. more

Overview of the Global Domain Market, Afnic Study

Afnic, the French Network Information Centre and manager of the .fr TLD, today published its report on the global domain market in 2016. more

4 Items for Applicants to Consider in Planning, Even As You Wait

With the effective deregulation of the domain name industry through the imminent launch of up to 1,000 new gTLD's, the competitive landscape is going to get a whole lot hotter over the next 24 months. We will likely see some financially and commercially successful ventures. It is likely that we will see many unsuccessful ones as well. The gap between success and failure will be slim. more