|
NEW DELHI: IronPort Systems Inc. today announced the deployment of IronPort Bounce Verification technology, designed to protect customers from email bounce attacks.
IronPort's unique solution signs the envelope's return (bounce) address, in SMTP's MAIL FROM: command for outgoing mail. When bounce messages are sent to an email gateway the existence of the correct signature will help determine legitimate bounces from fraudulent bounces.
IronPort's Bounce Verification technology represents the first appliance-based solution compliant with Bounce Address Tag Validation (BATV), which is circulating as a draft with Internet Engineering Task Force (IETF) and is expected to enter the standards process.
The total volume of misdirected bounces has grown 35 per cent since Q1, 2006. Misdirected bounces now make up 15.2 per cent of hostile email, or over seven billion messages per day. The vast majority of these messages are sent to invalid return addresses, clogging the mail systems of the forged domain owner, but never getting delivered to an end-user. An emerging technique is for spammers to forge the end recipient's email address (as the return address), so that legitimate organizations will bounce spam on to its final destination. These attacks can cause the mail servers of these legitimate organizations to get blacklisted.
Tom Gillis, senior vice president of Worldwide Marketing at IronPort Systems, said, "Market demand for a solution to bounce attacks has never been greater. Traditional email security solutions available in the market today are simply not effective at stopping bounce attacks. IronPort's Bounce Verification incorporates pioneering technology from the Internet community and makes it available in an easy to use, 'set and forget' appliance."
© CyberMedia News
|