Anti-Pharming Solutions
Pharming, also known as DNS poisoning, occurs when the security of Root Servers, Authoritative DNS Servers or Caching Servers are compromised, and IP addresses are changed to redirect known URLs to fraudulent sites. Unlike Phishing, Pharming is not reliant upon users being lured to a site via eMail. Perpetrators of Pharming attacks wait for victims to type a known domain name into their browser. Although the correct domain is utilized, victims are presented with a site pointing to an IP address where a fraudulent site is hosted.
IT Matrix/MarkMonitor provides the industry’s only suite of services to monitor and protect companies against Pharming, and other domain name attacks. These services include:
Global Domain Name Monitoring
IT Matrix/MarkMonitor offers a patent pending solution that monitors for changes to a live domain name in the Internet, including detecting split DNS tactics devised to avoid standard monitoring solutions. These changes may be the result of Pharming attacks, social engineering attacks designed to change registry entries or unintentional changes mistakenly submitted through the registrar of record. MarkMonitor’s 24 x 7 x 365 operations center receives all alerts, reports all suspicious changes, and assists customers in quickly correcting the situation.
Authoritative DNS Monitoring
IT Matrix/MarkMonitor also monitors Authoritative DNS Servers for company-owned domains on a daily basis. Should inconsistencies from one day to the next arise, clients are notified immediately by our 24 x 7 x 365 operations center.
SPF-Enabled Enterprise DNS
Customers of IT Matrix/MarkMonitor’s Enterprise DNS can rest assured that their DNS servers are not vulnerable to DNS poisoning attacks, such as Pharming. Moreover, Enterprise DNS supports new levels of security and authentication, such as SPF, which is fast becoming a requirement to identify legitimate email at the largest Internet Service Providers. Moreover, IT Matrix/MarkMonitor provides an advanced user interface and tools to manage Enterprise DNS securely, accurately and consistently.
IT Matrix/MarkMonitor’s suite of DNS monitoring and security solutions provide the only comprehensive approach to preventing and detecting DNS based attacks, such as Pharming. In addition, Enterprise DNS goes well beyond prevention, and enables companies to quickly and accurately deploy DNS enabled authentication services, such as SPF, that assures ISPs that your outbound traffic is legitimate.