Cloud security

The standard addressing method used for Domain Name Systems is “unicast.” This means that a particular DNS server has a dedicated IP Address. Hence, if the server becomes the victim of a DDoS attack, the whole service under this IP becomes affected.

To cater to this problem, Denizon uses Anycast technology. Anycast removes the problems associated with this single point of failure. In the Anycast technology, name servers, distributed as a cloud, advertise the same IP Address. If a DDoS source infests the system, only the Anycast instance nearest to the DoS (Denial of Service) source gets infected. Hence, even when infested by a DDoS attack, the service remains available.

Denizon continuously monitors its network, hardware, applications, and ports for potential vulnerabilities. We deploy the best intrusion detection services that analyze network traffic and generate alerts in response to known patterns of activities.

We also make sure to prevent DDoS attacks on its tracks by monitoring network and hardware continuously. DDoS stands for Denial of Service, and it is a severe threat that brings websites and servers down by bombarding them with requests. DDoS attacks essentially load the target system with a massive number of requests that makes the system lag and reach its downtime. We at Denizon ensure DDoS prevention and mitigation on all levels of the cloud.

Denizon offers DNS failover protection so that the cloud service remains accessible even in the event of an outage. Our monitoring servers make sure that your DNS is instantly updated on all cloud servers as soon as your primary IP fails to respond. Denizon also offers the feature of Disaster recovery in this case so that your data does not get lost when disaster strikes.

Denizon also offers anti-spam, anti-virus and phishing protection to the applications and data that you host on the cloud. We also offer URL filtering options so that threats are stopped at the source and do not enter the cloud network to infest your valuable data.

A secure, dedicated, web-based firewall blocks HTTP traffic, filters specific web applications and acts as a safety gate between servers. Denizon uses a dedicated web-based firewall to block unsecured traffic and mitigate common attacks.

Our compliance policies and procedures put into place ensure that your sensitive data like Credit Card numbers and Social Security numbers are safe from attack.

We carry out regular security audits in order to evaluate your information and to measure how it conforms with our pre-set security criteria. By carrying out a thorough audit, we assess the security of the physical configuration of our infrastructure and the information handling process to determine security compliance and take adequate measures to handle non-conformities.

We also update security patches and carry out compatibility checks regularly to ensure additional security of your applications and data.

A Web Application Firewall (WAF) filters, blocks and monitors HTTP traffic from and to your applications in order to check for Session Poisoning, Buffer Overflow Exploits, SQL injection, and other vulnerabilities. A WAF can prevent attacks from application security flaws.

Denizon deploys WAF protection in its cloud service, ensuring that your applications and data always remain protected from network attacks.

You can remotely access the system hardware using Denizon’s services. With a globalized economy and a geographically spread business, remote access is essential to every organization. We ensure that this remote access does not hamper or trigger infestation of vulnerabilities into your system. We ensure that your remote access mechanism uses strong passwords, firewall systems, lockout policies, and network level authentication in order to secure it from external attacks.

We ensure that we add an extra level of security in your cloud services by offering multi-factor authentication. While multi-factor authentication might seem to be an easy security fix, its positive impacts of cloud security are many. About 81 percent of hacking breaches are password related, and ensuring security on the authentication level means that half of your cloud security needs are met. Another advantage of deploying multi-factor authentication is that the same rules can be applied for all applications and data hosted on the cloud.

Denizon deploys the combination of IDS (Intrusion Detection System) and IPS (Intrusion Prevention System) to secure the cloud. We have real-time IPS and IDS sensors that examine events on your system as well as your network to detect possible intrusion attacks. The IPS and IDS sensors are deployed to copy and monitor the actual traffic.

IDS is a monitoring system that compares network packets to cyber threat databases and flags any matching packets. IPS, on the other hand, is a control system which prevents the flagged packet from entering the system. We regularly update, prepare and make manual adjustments to the IDS and IPS systems to keep it up to date with recent cybersecurity attacks.

Denizon deploys email and web filtering on the cloud. Email filtering is the method of organizing emails according to pre-set specified criteria. We deploy anti-spam techniques that detect spam and phishing emails to save your system from external attacks.

Denizon also offers a web filter service that screens incoming web pages and decides if the content is suitable to be displayed to the user. A set of rules are deployed, and the content/ origin of the web page is checked against the rules. Once, the web page meets all the required standards, only then will the page be allowed to be displayed to the user.

Denizon also offers upload/offload of SSL certificates. SSL offloading is the process of removing SSL based encryption from incoming traffic, to relieve it from decryption of data. Offloading SSL certificates are sometimes referred to as load balancing since it offloads additional tasks from the cloud’s application servers so they can focus on their primary functions.

We also upload custom SSL certificates to secure/encrypt sensitive communication between the cloud components.