10 Things to Know About the Cost of DNS Attacks

 
 
By Karen A. Frenkel  |  Posted 06-05-2014 Email Print this article Print
 
 
 
 
 
 
 
 

The top challenge most organizations face in protecting networks against Domain Name Service (DNS)-based attacks is the cost of security solutions. Infoblox, a network control solutions firm, recently sponsored a survey on DNS protection which shows that many organizations hesitate to adopt new security solutions because of the cost. The price of an attack, however, can be much more, as the survey results reveal. There is also a troubling lack of consensus on how to leverage DNS technology to block potential malicious activity, the Infoblox report notes. Most organizations currently use DNS Response Policy Zones (RPZs) to block malicious domains, and larger organizations (1,000+ employees) are significantly more likely to be using DNS RPZs versus organizations with less than 1,000 employees, 43 percent vs. 10 percent, respectively, according to the report. Also, smaller organizations are significantly more likely to use a free or open source feed to create a DNS blacklist than a larger organization (38 percent vs. 13 percent, respectively).The Infoblox survey was conducted online and included 128 respondents based in the U.S. and Canada. For the full report, click here.

 
 
 
  • Top Five Concerns About DNS Attack Protection

    A majority of organizations worry about the cost of security solutions. 52% say the cost of security solutions, upfront and maintenance, is too high. 45% cite a lack of organizational awareness and priority. 38% say it's difficult to maintain network availability during an attack. 35% are concerned about a lack of DNS-focused security solutions. 33% point to a lack of the right IT skill sets in-house.
    Top Five Concerns About DNS Attack Protection
  • Average Cost of Attack Varies

    Average cost associated with one hour of downtime due to a DNS attack is $105,710. This tally includes user productivity, lost revenue, increase in IT support costs and other operational costs.
    Average Cost of Attack Varies
  • DNS-Based Attack Costs for Large Enterprises

    Organizations with 1,000 or more employees report that an hour of downtime averages $186,111 in losses.
    DNS-Based Attack Costs for Large Enterprises
  • Damage Due to DNS-Based Attacks

    DNS-based attacks result in significant damage for 43% of respondents.
    Damage Due to DNS-Based Attacks
  • How Concerned Should You Be About Downtime?

    60% of respondents are highly concerned about downtime, loss of sensitive data and a negative impact on perception of the organization or brand.
    How Concerned Should You Be About Downtime?
  • Types of DNS Attacks Experienced

    The respondents report a variety of DNS-based attacks, but DDoS attacks are the new normal: DNS DDoS attacks: 76%, DNS cache poisoning: 33%, DNS exploits: 29%, UDP flood: 29%, DNS tunneling: 24%
    Types of DNS Attacks Experienced
  • How Many Organizations Suffer Significant Financial Impact?

    43% of organizations that experienced one of the above DNS-based attacks was hindered as a result. Of these, 29% say the impact was "extremely significant" and 14% say it was "significant."
    How Many Organizations Suffer Significant Financial Impact?
  • Length of DNS Service Interruption

    48% of respondents say DNS service interruptions due to DNS attacks lasted an average of 7 hours.
    Length of DNS Service Interruption
  • Length of Diminished Network Service

    48% of respondents say diminished network service lasted 18 hours, on average.
    Length of Diminished Network Service
  • Likelihood of Adopting Solutions for DNS-Based Attacks

    66% of respondents say their organizations are somewhat likely to consider solutions during the next year. 36% say they are extremely likely or very likely to do so. Larger companies are the most likely to adopt solutions.
    Likelihood of Adopting Solutions for DNS-Based Attacks
 
 
 
 
 
Karen A. Frenkel writes about technology and innovation and lives in New York City.

 
 
 
 
 
 

Submit a Comment

Loading Comments...
 
 
 
 
 
 
 
Thanks for your registration, follow us on our social networks to keep up-to-date