Feeds

Zeus throttles app-level DoS attacks

BT trials

  • alert
  • submit to reddit

5 things you didn’t know about cloud backup

Zeus Technology is upgrading its Web server technology to guard against application level denial of service (DoS) attacks.

Exploiting concern about the security of Microsoft's IIS Web server, Zeus will today announce the addition of anti-denial of service extensions to Zeus Web Server version 4.

According to Andrew Parker, vice president of corporate strategy at Zeus Technology, organisations can enhance the security of an organisation's web infrastructures by placing Unix boxes running Zeus in front of IIS farms. BT is trialling the technology.

Zeus's technology, which includes load balancing, can be used to rate limit requests to IIS server and throttle CPU-intensive applications, Parker says.

This will guard against the worst effects of recent worms like Nimda and Code Red which take advantage of well-known vulnerabilities in IIS, as well as guarding against more subtle application-level DoS attacks.

It does not protect sites from network-level distributed denial of service attacks, of the kind which floored eBay and Yahoo! last year. Such bandwidth-consuming attacks, commonly generated by a network of Trojaned zombies, need to be defended against before a flood of traffic reaches a Web server, possibly by adaptations to routers or other network hardware. This is notoriously difficult.

The Nimda worm outbreak showed that many organisations were running Web servers they never knew they had. So any hopes that Zeus's Technology eliminates the need to apply security patches are misplaced.

Migration Route

That said, Zeus has an enviable security record and its approach has merits in providing defence in depth from security risks. The firm also gains a useful toe-hold in organisations it is seeking to migrate off IIS.

Web servers are commonly integrated with an organisation's applications and databases, and Zeus has the job of convincing companies to move onto Unix - for its strategy of getting users to migrate long-term to bear fruit.

Also, it will have to convince people who, perhaps motivated by Gartner's recent advice, are considering moving from IIS why they should go with its technology, rather than iPlanet or Apache.

Nonetheless, since the release of the latest version of its Web server (which improves the delivery of dynamic pages and makes Zeus even faster), the firm has broadened its appeal from the niche role it occupied in the web server market to become a more serious contender. ®

Related Stories

Netcraft Web Server Survey - October 2001
Zeus rips platform to splatter Apache
Sun lures IIS defectors with iPlanet price cuts
>Can IIS flourish post-Gartner?
Ditch Microsoft IIS now, says Gartner
Cowboy cracker nails Apache

Secure remote control for conventional and virtual desktops

More from The Register

next story
Ice cream headache as black hat hacks sack Dairy Queen
I scream, you scream, we all scream 'DATA BREACH'!
Goog says patch⁵⁰ your Chrome
64-bit browser loads cat vids FIFTEEN PERCENT faster!
NIST to sysadmins: clean up your SSH mess
Too many keys, too badly managed
Scratched PC-dispatch patch patched, hatched in batch rematch
Windows security update fixed after triggering blue screens (and screams) of death
Researchers camouflage haxxor traps with fake application traffic
Honeypots sweetened to resemble actual workloads, complete with 'secure' logins
Attack flogged through shiny-clicky social media buttons
66,000 users popped by malicious Flash fudging add-on
JLaw, Kate Upton exposed in celeb nude pics hack
100 women victimised as Apple iCloud accounts reportedly popped
New Snowden leak: How NSA shared 850-billion-plus metadata records
'Federated search' spaffed info all over Five Eyes chums
Three quarters of South Korea popped in online gaming raids
Records used to plunder game items, sold off to low lifes
Oz fed police in PDF redaction SNAFU
Give us your metadata, we'll publish your data
prev story

Whitepapers

Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Advanced data protection for your virtualized environments
Find a natural fit for optimizing protection for the often resource-constrained data protection process found in virtual environments.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.