Categories
Domain Name System Security Extensions (DNSSEC) Improving Technical Security Open Internet Standards Technology

Creating a Secure and Resilient Internet: Community Collaboration Required

“The Internet is open, interconnected and interdependent. It’s an ecosystem based on collaboration and shared responsibility.”

These are the opening remarks of our new infographic called “Collaboration for a resilient and secure Internet.” In it, we’ve tried to convey the idea that when it comes to Internet security and resilience, the traditional approach of just protecting our own assets is not good enough – the Internet demands a sense of collective stewardship and shared responsibility to be truly secure and truly resilient to attack.

When performing a risk assessment, do you also look at risks your network presents to the Internet ecosystem – so-called “outward” risks? How much do you care if your network passes traffic with spoofed IP addresses? How many of your DNS resolvers, NTP and SNMP servers are ready to answer queries from anyone in the world? Do you scrutinize routing announcements you are getting from your customers and peers?

There are several technologies and best practices available to mitigate these risks. Implementing them has costs, but through collective action we are creating a safer global network – a benefit that is hard to overestimate.

Please check out the infographic below and let us know what you think. What else can we do to encourage *every* network operator to deploy these technologies and best practices and help keep the Internet secure?

Categories
Deploy360 IPv6

New Infographic on IPv6-Enabled Sites in Top 1 Million Alexa sites

How many of the top 1 million websites (according to Alexa) are using IPv6? Hackertarget.com, a provider of online security scanning services, released an infographic summarizing their research. As they say on their page:

Analysis of IPv6 enabled sites was conducted in March 2012. We have analysed the Alexa Top 1 Million sites and looked for the presence of AAAA DNS records indicating an IPv6 enabled site.

Once determined we then looked at the hosting locations, net block owners, web servers and operating systems in use. The following infographic summarises the results from the analysis.

I found a number of interesting points through the stats, such as the higher percentage of German websites with IPv6. In looking at the list of “number of IPv6 enabled site by netblock owner”, I found it interesting that the top 4 (on the bottom of the chart) seem to be two German hosting providers, a Russian hosting provider and then the Cloudflare content delivery network (CDN) – demonstrating, to me, the value of getting hosting providers and CDNs to deploy IPv6 connectivity.

It’s good that Hackertarget.com conducted this survey in March 2012 prior to World IPv6 Launch on June 6 and it would be great if they do this a month or two after World IPv6 Launch so that we could see a comparison.  We do know, for instance, that the number of sites in the Alexa top 1 million with IPv6-enabled corporate web sites will expand from the four listed here, purely based on the number of sites already signed up to participate in World IPv6 Launch.

Kudos to the Hackertarget.com team for putting this together… (and you can see the larger version by clicking on the image).

Browse more infographics.