{"id":44990,"date":"2016-02-22T05:00:00","date_gmt":"2016-02-22T05:00:00","guid":{"rendered":"https:\/\/www.cira.ca\/news\/cira-calls-law-enforcement-protect-their-departments-dns-based-cyber-attacks\/"},"modified":"2023-03-10T10:57:51","modified_gmt":"2023-03-10T15:57:51","slug":"cira-calls-law-enforcement-protect-their-departments-dns-based-cyber-attacks","status":"publish","type":"cira_news","link":"https:\/\/stg-saas.cira.ca\/en\/resources\/news\/cybersecurity\/cira-calls-law-enforcement-protect-their-departments-dns-based-cyber-attacks\/","title":{"rendered":"CIRA calls on law enforcement to protect their departments from DNS-based cyber-attacks"},"content":{"rendered":"<p><strong><em>Vancouver, BC \u2013 February 22, 2016<\/em><\/strong> \u2013\u00a0High-profile websites can fall victim to malicious online actors looking to score propaganda points<\/p>\n<p><!--more--><\/p>\n<p><strong><em>Vancouver, BC \u2013 February 22, 2016<\/em><\/strong> \u2013 Today at the national meeting of Canada&#8217;s Chiefs of Police, the Canadian Internet Registration Authority (CIRA) called on Canada&#8217;s law enforcement community to protect their domains and DNS from cyber-attacks.<\/p>\n<p>\u201cThe DNS is the Achilles heel of the Internet,\u201d said Jacques Latour, chief technology officer at CIRA. \u201cWhen your DNS goes down, your website, your web applications, your email, your web services all fail. It can be devastating to an organization.\u201d<\/p>\n<p>Law enforcement agencies, because of their profile in the community, are likely targets for hackers and cyber-criminals.<\/p>\n<p>The Canadian Internet Registration Authority recommends law enforcement immediately take several steps to secure their Internet infrastructure and prevent outages.<\/p>\n<ul>\n<li><strong><em>Use an Anycast DNS service<\/em>: <\/strong>Some legacy web architectures use what is called a unicast DNS. These services offer little redundancy and leave the DNS extremely vulnerable to DDoS attack. Ensure that you have an Anycast DNS solution that can withstand attacks and keep services online.<\/li>\n<li><strong><em>Confirm the DNS is properly configured and includes a primary and secondary<\/em>:<\/strong> Redundancy is important when setting up a world-class DNS configuration, and administrators should confirm that their DNS settings are configured correctly. In testing, CIRA found Canada&#8217;s DNS availability is startlingly poor, with a lack of redundancy and configuration errors causing 93 per cent of DNS servers in Canada to miss queries over a six month period. For lesser-known websites this may not be an issue, but misconfigurations could leave law enforcement open to attack.<\/li>\n<li><strong><em>Use a domain locking service<\/em><\/strong>: Any .CA domain can be locked with CIRA to prevent unauthorized changes to the domain settings. This prevents malicious actors from redirecting a domain to a new site with damaging information, a common form of cyber-attack. In 2015 the City of Ottawa&#8217;s website was redirected to an image of a dancing banana. ISIS sympathizers have also used this tactic to redirect pages to ISIS propaganda.<\/li>\n<\/ul>\n<p>\u201cAs the fist-line of defence against online criminals, we need law enforcement to be leading the way on DNS security,\u201d said Latour. \u201cSafe and secure DNS solutions tend to be exceptionally affordable and simple to deploy. I find it troubling that many police forces do not take these simple steps to protect their online services.\u201d&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<\/p>\n<h2>Additional resources:<\/h2>\n<p><strong><em>Get a free trial of CIRA D-Zone Anycast DNS<\/em><\/strong>: CIRA offers a made-in-Canada DNS solution that is ideal for Canadian organizations. IT Managers can learn more about this service with a free trial and sign-up at <a href=\"\/node\/606\">stg.cira.ca<\/a>.<\/p>\n<h2>About CIRA<\/h2>\n<p>The Canadian Internet Registration Authority (CIRA) manages the .CA top-level domain on behalf of all Canadians. A Member-based organization, CIRA also develops and implements policies that support Canada&#8217;s Internet community, and represents the .CA registry internationally.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Vancouver, BC \u2013 February 22, 2016 \u2013\u00a0High-profile websites can fall victim to malicious online actors looking to score propaganda points<\/p>\n","protected":false},"featured_media":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"ngg_post_thumbnail":0,"slim_seo":{"title":"CIRA calls on law enforcement to protect their departments from DNS-based cyber-attacks - CIRA","description":"Vancouver, BC \u2013 February 22, 2016 \u2013\u00a0High-profile websites can fall victim to malicious online actors looking to score propaganda points Vancouver, BC \u2013 February"},"footnotes":""},"topic":[28],"class_list":["post-44990","cira_news","type-cira_news","status-publish","hentry","cira_news_type-cira-news-type-press-release","cira_topic-cira-topic-cybersecurity","cira_author-tanya-ocallaghan"],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/stg-saas.cira.ca\/en\/wp-json\/cira\/v1\/news\/44990","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/stg-saas.cira.ca\/en\/wp-json\/cira\/v1\/news"}],"about":[{"href":"https:\/\/stg-saas.cira.ca\/en\/wp-json\/wp\/v2\/types\/cira_news"}],"version-history":[{"count":0,"href":"https:\/\/stg-saas.cira.ca\/en\/wp-json\/cira\/v1\/news\/44990\/revisions"}],"wp:attachment":[{"href":"https:\/\/stg-saas.cira.ca\/en\/wp-json\/wp\/v2\/media?parent=44990"}],"wp:term":[{"taxonomy":"cira_topic","embeddable":true,"href":"https:\/\/stg-saas.cira.ca\/en\/wp-json\/cira\/v1\/topic?post=44990"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}