Domain Age Detection Function

[rakhirhif8963]

Domain age as a criterion for filtering on the Internet
Sergey Menshakov, McAfee Presales Engineer | 05/28/2021
Domain age detection is a feature that is promoted by various firewall and internet security vendors as a way to protect users and systems from accessing malicious internet resources. Domain age is used as a general traffic filtering parameter. The idea is that hosts associated with recently registered domains are completely blocked, isolated, or classified as highly suspicious. We will cover what domain age is, how domains are created and registered, why domain age is valuable, and how to effectively use it as an additional internet security tool.

Websites and domains on the Internet macedonia mobile database constantly evolving and changing. In the first quarter of 2020, on average, more than 40,000 domains were registered daily. If the destination host domain is known, its registration date can be easily verified in various sources. Domain age is the time that has passed since its registration until now.

The Domain Age Detection feature is used in policy management, allowing the administrator to set a minimum domain age for granting access to an Internet resource. The idea is that since domains are now easy and inexpensive to acquire, new domains require special care and, in some cases, are best blocked. Unfortunately, in most protocols and solutions, the domain age policy is a simple two-choice decision - allow or deny. This is not very effective when the final destination is a host, subdomain, or address that can be quickly connected, changed, and disconnected without changing the domain age. As a result, alternative security solutions based only on the domain name or age create risks of false positives and false negatives, which reduce the effectiveness of protection, reduce performance, and degrade the user experience.