Customer Cases. Andreas Nordenadler, Sales Manager
|
|
- Shon Malone
- 8 years ago
- Views:
Transcription
1 Customer Cases Andreas Nordenadler, Sales Manager
2 CERT-XX Attacks May 19 th and onward
3 AGENDA Motivation Attack Campaign Timeline Attack Vectors Summary
4 Motivation
5 Operation OpXX May 3 rd Department of Telecom XX publicly orders all ISPs to block access to file sharing sites like Vimeo, The Pirate Bay, Torrentz etc. Anonymous XX and other hacktivists being against any internet censorship, react immediately Multiple DoS/DDoS attacks against XX Government sites - Supreme Court, All XX Congress Committee and more. Slide 6
6 CERT-XX is targeted Newspaper XX publishes that CERT-XX is mandated to write reports on the attacks May 19 th, Anonymous targets CERT-XX and start a three-day attack campaign CERT-XX, Computer Emergency Response Team XX, is the national nodal agency for responding to computer security incidents as and when they occur. Slide 7
7 Attack Timeline
8 Thursday May 17 th - before the attacks Day 0 Thu May 17 th 12:00 Department of Telecom orders ISP s to block file sharing. Supreme Court, All XX Congress Committee and others were hit by a DDoS attack 16:00 Preliminary contact is made by Radware XX engineers with CERT with respect to this threat Radware XX initiates contact with CERT-XX Slide 9
9 Attack begins and causes outage Saturday May 19 th - Day I Day 1 Sat May 19th 10:00 CERT-XX website is taken down by Anonymous. The site is down for 4 ½ hours. ERT Invoked, DP mitigates the attack Radware XX installs new DP-ODS2 device at ISP 14:30 16:15 20:00 CERT-XX contacts Radware XX personnel Radware XX engineers arrive on site. ERT receives first heads-up. Existing DefensePro AS4 4.X on CERT-XX site mitigates the HTTP flood and TCP-REST attack successfully. New DefensePro ODS2 device is installed at ISP to protect the pipe main raison for downtime. ERT mitigates the attack 22:00 ERT connects to the device, configures it and mitigates the attack. Slide 10
10 Sun May 20 th - Day II Day2 Sunday May 20 th 10: 00-17:00 Attack s intensify, higher rate of HTTP Floods and PSH+ACK garbage floods ERT continuously monitors and optimizes protections on DefensePro per new attack vectors. Attack Mitigated by DefensePro and ERT Slide 11
11 Mon May 21 st - Day III Day3 Mon May 21 st 10: 00-17:00 Attacks continue. DefensePro automatically mitigates the attacks. Attacks Mitigated by DefensePro Slide 12
12 Attack Continues Mitigation is Automatic No ERT invocation The End (so far) Slide 13
13 Attack Vectors
14 Attack Vector I: TCP Garbage Flood Attack Vector PSH+ACK Garbage Flood port 80 Description Vector Impact Mitigation TCP PSH+ACK packets that contain garbage data No initiation of proper TCP handshake ~120 PPS from a single attacker Bandwidth saturation of the pipe and IPS to crash Port 80 traverses the security devices along the way Out-of-state (OOS) IPS Signatures Garbage Data Slide 15
15 Attack Vector II: HOIC HTTP Flood Attack Vector Description Vector Impact Mitigation HOIC HTTP Flood HTTP requests (including references) loops every ~30-60 secs HTTP header values changes between sources (use of a booster) Exhaust web server resources as well as bandwidth. JS web cookies Blacklist Slide 16
16 Attack Vector III: Slowloris Attack Vector Description Vector Impact Mitigation Slowloris attack Slow HTTP DoS tool sending incomplete HTTP requests Sends one CRLF at the end of HTTP requests headers (instead of two) Very little computing resources required on attacker s side Web server time out IPS Signatures Slide 17
17 Attack Vector IV: Network Scans Attack Vector Description Vector Impact Mitigation TCP, UDP, ICMP Network Scans Network Scans intended to identify hosts and services Exhaust web server resources as well as bandwidth. Anti-Scanning Protection ICMP Scans UDP Scans TCP Scans detected by DP Slide 18
18 Attacks seen in Vision Sonar Green: Intrusion attack (slowloris) Pink: DDoS attacks (SYN Floods) White: Packet anomalies -non RFC compliant or Out of state packets.
19 Summary
20 Full Spectrum Technology to mitigate multi vector attack BODS Out-of-State SYN Protection IPS Signatures DME (DoS Mitigation Engine) Blocks 2M PPS ERT Quick security deployment Detect new attack vectors Detect new weak point: Router, DefensePro Sizing Slide 21
21 Business Impact CERT-XX Original Budget 1 DP AS4 Budget Change After the Attack 2 DP ODS3 1 Vision Slide 22
22 Public Conclusions from CERT-XX, Countermeasures Slide 23
23 Scandinavian Hosting Company Slide 25
24 WikiLeaks Revenge Attacks
25 Background In December 2010, WikiLeaks came under intense pressure to stop publishing secret United States diplomatic cables. Corporations such as Amazon, PostFinance, MasterCard and Visa either stopped working with or froze donations to Wikileaks, apparently bowing to political pressure. Slide 27
26 Operation Payback In response, members of the Anonymous group (people behind Operation Payback) made available a relatively simple to-use tool to quickly direct a Distributed Denial-of-Service (DDoS) attack against any company that was perceived to be conspiring against Wikileaks. Most of the targeted sites experienced major service disruptions resulting in multi-hour business outages. Slide 28
27 Operation Payback Initial Target Set 29
28 From the news Slide 30
29 Distributing attack tools and coordination Send updates Coordinator Twitter LOIC attack tool Internet Hactivist Slide 31
30 Coordinated attacks Coordinator LOIC Attack Tool LOIC Attack Tool Internet Public Web Servers LOIC Attack Tool LOIC Attack Tool Legitimate User Slide 32
31 Multi-vector attacks Network DDoS attacks: High PPS SYN flood and UDP flood attack (up to 8M packets-persecond) Oversized UDP frames Connection flood attacks LOIC Attack Tool Application DDoS attacks: HTTP page request floods HTTP data floods SlowLoris LOIC Attack Tool Internet Public Web Servers LOIC Attack Tool LOIC Attack Tool Legitimate User Slide 33
32 Why are the attacks so challenging Attack High PPS attacks Oversized UDP frames Fragmented and corrupted UDP frames Connection flood attacks HTTP page flood attacks Slowloris Impact Equipment Bottlenecks Consume network bandwidth Consume equipment resources Consume TCP stack resources Consume server resources Slide 34
33 Mapping protection measures Attack High PPS attacks Oversized UDP frames Fragmented and corrupted UDP frames Connection flood attacks Protection DoS Protection DoS Protection DoS protection IPS HTTP page flood attacks Slowloris NBA No single protection tool can IPS handle today s emerging network threats Slide 35
34 Anti-DoS for MSSPs
35 Deployment: Scrubbing Center Unique capabilities for Scrubbing Center deployments: Full coverage against all type of DoS attacks: Packet & BW attacks Application DDoS attacks Directed DoS attacks Best SLA: Time to protect - immediate (in seconds) Multi-tenant reporting engine Management & SEM Attack Mitigation System Slide 37
36 MSSP Customer Case Business Requirements Offer value-added DDoS Protection for their hosted data center customers Why AMS? Best & proven coverage against all type of DDoS attacks Most accurate attacks detection and mitigation Advanced reporting per customer About the customer A major telecommunications provider in North America Over $15 billion revenue (2010) Slide 38
37 Floods Managed Security Service Providers MSSP Solutions Radware Proprietary Slide 39
38 MSSP Landscape MSSP The Service Provider Angle - Many new and sophisticated attacks (application and network) impact famous companies. Business impact is very clear! - Customer awareness no need to educate, risks understood - Customers (even large enterprise) can t afford and/or don t understand how to cope - Business opportunity for the service providers! Network-based service. How to guarantee SLA? MSSP The Customer Angle - Require portal-based access, dedicated reports and real-time alerts. False positives! Slide 40
39 Deployment: Out-of-path Scrubbing Center Unique capabilities for Scrubbing Center deployments: Full coverage against all type of DoS attacks: Packet & BW attacks Application DDoS attacks Directed attacks Best SLA: Time to protect - immediate (in seconds) Multi-tenant reporting engine Management & SEM Attack Mitigation System Slide 41
40 MSSP Radware s Unique Value Proposition Differentiated protection Superior attacks coverage SSL HTTP DNS Application floods/direct attacks WAF Transparent (wire) out-of-path deployment Key point - bgp redirection and GRE/LSP backhaul MSSP Multi-tenant reporting Best cost performance ratio in the industry ERT (Emergency Response Team)! Slide 42
41 ERT Case Studies Cyber Attacks
42 Robin Hoods or Criminals? SONY Example Massive DoS attack taking down the PlayStation network for hours Initiated after filing a sue against hacker who broke PS3 protection mechanism During attack CC data of millions of users was stolen Anonymous involvement was partially denied 44
43 Robin Hoods or Criminals? Sic Semper Tyrannis Long campaign against the Vatican web infrastructure Started with a failed attempt to hack Vatican systems and databases Continued as a massive DoS attack lasting for days, in repeating waves 45
44 Robin Hoods or Criminals? Russian Presidential Elections During elections time in Russia, first Duma and then for Presidency... DDoS attacks on protestors blogs, parties websites, reporting websites etc. It can t be long before we observe a DDoS attack between two political parties based on one and the same botnet. Eugene Kaspersky (blog) 46
45 Course Of Events January 3 rd Saudi hacker 0xOmar leaks tens of thousands Israeli credit card numbers and other personal sensitive information. January 16 th Early Morning 0xOmar and the Pro-Palestinian Nightmare hacker group sends an to the Jerusalem Post, threatens to attack EL-AL website. 9:30 AM EL-AL, Tel-Aviv Stock Exchange, First International Bank of Israel and Discount Bank websites are attacked and are unavailable for hours. January 17 th Israeli hacker group IDF-Team retaliates by attacking Saudi and UAE s Stock Exchanges websites January 18 th More Israeli websites targeted: Bank of Israel website under attack 47
46 Israeli sites under attack In the following weeks, dozens of Israeli web sites were attacked by Pro- Palestinian hacker groups A Cyber War emerged 48
47 Verified Attackers Conclusions: Attacks were highly distributed Generated by an international collective or a Botnet Geo-IP blocking renders useless 49
48 Aftermath Major banks, and government sites were actively protected by Radware AMS and ERT To fully protect online businesses you need: DDoS Protection from the service provider Based on Radware AMS To remove volumetric network attacks On-premises Anti-DoS and Behavioral Analysis Based on Radware AMS Remove the application flood attacks and directed DoS attacks 50
49 Radware end-to-end mitigation solution fighting the DDoS threat 51
50 Thank You
Debunking Myths About DDoS Attacks: Radware 2011 Global Security Report.
Debunking Myths About DDoS Attacks: Radware 2011 Global Security Report. Mick Stephens, General Manager - Australia & New Zealand, Radware Ltd. March 2012 AGENDA About 2011 Global Security Report Key Findings:
More informationSHARE THIS WHITEPAPER. On-Premise, Cloud or Hybrid? Approaches to Mitigate DDoS Attacks Whitepaper
SHARE THIS WHITEPAPER On-Premise, Cloud or Hybrid? Approaches to Mitigate DDoS Attacks Whitepaper Table of Contents Overview... 3 Current Attacks Landscape: DDoS is Becoming Mainstream... 3 Attackers Launch
More informationProtection against DDoS and WEB attacks. Michael Soukonnik Radware Ltd michaels@radware.com
Protection against DDoS and WEB attacks Michael Soukonnik Radware Ltd michaels@radware.com Landscape Ponemon Research 2012: Cyber security threats Cyber security threats according to risk mitigation priority
More informationRadware Attack Mitigation Solution (AMS) Protect Online Businesses and Data Centers Against Emerging Application & Network Threats - Whitepaper
Radware Attack Mitigation Solution (AMS) Protect Online Businesses and Data Centers Against Emerging Application & Network Threats - Whitepaper Table of Contents Abstract...3 Understanding Online Business
More informationIntroducing Radware Attack Mitigation System. Presenter: Werner Thalmeier September 2013
Introducing Radware Attack Mitigation System Presenter: Werner Thalmeier September 2013 Agenda Introducing Radware (quick) Current Attacks Landscape Quick Outlook on Radware Attack Mitigation System (AMS)
More informationSHARE THIS WHITEPAPER. Top Selection Criteria for an Anti-DDoS Solution Whitepaper
SHARE THIS WHITEPAPER Top Selection Criteria for an Anti-DDoS Solution Whitepaper Table of Contents Top Selection Criteria for an Anti-DDoS Solution...3 DDoS Attack Coverage...3 Mitigation Technology...4
More informationSecurityDAM On-demand, Cloud-based DDoS Mitigation
SecurityDAM On-demand, Cloud-based DDoS Mitigation Table of contents Introduction... 3 Why premise-based DDoS solutions are lacking... 3 The problem with ISP-based DDoS solutions... 4 On-demand cloud DDoS
More information[Restricted] ONLY for designated groups and individuals. 2014 Check Point Software Technologies Ltd.
[Restricted] ONLY for designated groups and individuals Contents 1 2 3 4 Industry Trends DDoS Attack Types Solutions to DDoS Attacks Summary 2 Cybercrime Landscape DNS Hijacking Malware 3% 3% Targeted
More informationSHARE THIS WHITEPAPER
Denial-of-Service (DoS) Secured Virtual Tenant Networks (VTN) Value-added DoS protection as a service for Software Defined Network (SDN) a solution paper by Radware & NEC Corporation of America Whitepaper
More informationRadware s Attack Mitigation Solution On-line Business Protection
Radware s Attack Mitigation Solution On-line Business Protection Table of Contents Attack Mitigation Layers of Defense... 3 Network-Based DDoS Protections... 3 Application Based DoS/DDoS Protection...
More informationDENIAL-OF-SERVICE ATTACKS
DENIAL-OF-SERVICE ATTACKS 40 years old & more present then ever Robert Dürr, Brühl, 16./17.09.2015 Axians Networks & Solutions GmbH email: robert.duerr@axians.de 1 WHO IS AXIANS?! Axians is the new brand
More informationTDC s perspective on DDoS threats
TDC s perspective on DDoS threats DDoS Dagen Stockholm March 2013 Lars Højberg, Technical Security Manager, TDC TDC in Sweden TDC in the Nordics 9 300 employees (2012) Turnover: 26,1 billion DKK (2012)
More informationFour Steps to Defeat a DDoS Attack
hite Paper Four Steps to Defeat a DDoS Attack Millions of computers around the world are controlled by cybercriminals. These computers have been infected with software robots, or bots, that automatically
More informationArrow ECS University 2015 Radware Hybrid Cloud WAF Service. 9 Ottobre 2015
Arrow ECS University 2015 Radware Hybrid Cloud WAF Service 9 Ottobre 2015 Get to Know Radware 2 Our Track Record Company Growth Over 10,000 Customers USD Millions 200.00 150.00 32% 144.1 16% 167.0 15%
More informationHow To Block A Ddos Attack On A Network With A Firewall
A Prolexic White Paper Firewalls: Limitations When Applied to DDoS Protection Introduction Firewalls are often used to restrict certain protocols during normal network situations and when Distributed Denial
More informationAcquia Cloud Edge Protect Powered by CloudFlare
Acquia Cloud Edge Protect Powered by CloudFlare Denial-of-service (DoS) Attacks Are on the Rise and Have Evolved into Complex and Overwhelming Security Challenges TECHNICAL GUIDE TABLE OF CONTENTS Introduction....
More informationCloudFlare advanced DDoS protection
CloudFlare advanced DDoS protection Denial-of-service (DoS) attacks are on the rise and have evolved into complex and overwhelming security challenges. 1 888 99 FLARE enterprise@cloudflare.com www.cloudflare.com
More informationFour Steps to Defeat a DDoS Attack
WHITE PAPER Four Steps to Defeat a DDoS Attack Millions of computers around the world are controlled by cybercriminals. These computers, infected with bot malware, automatically connect to command and
More informationDefense4All: Anti-DoS for OpenDaylight. July 18, 2013
Defense4All: Anti-DoS for OpenDaylight July 18, 2013 Introducing Defense4All Defense4All offers DDoS attack detection engine and a traffic diversion mechanism based solely on the programmable characteristics
More informationDDoS - Distributed Denial of Service
September 2013 Distributed Denial of Service Attacks COMPROMISING NETWORKS AND ORGANISATIONS Executive Summary Distributed Denial of Service (DDoS) attacks are a major cause of disruption for networks
More informationFortiDDoS. DDoS Attack Mitigation Appliances. Copyright Fortinet Inc. All rights reserved.
FortiDDoS DDoS Attack Mitigation Appliances Copyright Fortinet Inc. All rights reserved. What is a DDoS Attack? Flooding attack from compromised PCs run by a Botmaster The Botmaster s motivations may be
More informationVALIDATING DDoS THREAT PROTECTION
VALIDATING DDoS THREAT PROTECTION Ensure your DDoS Solution Works in Real-World Conditions WHITE PAPER Executive Summary This white paper is for security and networking professionals who are looking to
More informationDDoS Overview and Incident Response Guide. July 2014
DDoS Overview and Incident Response Guide July 2014 Contents 1. Target Audience... 2 2. Introduction... 2 3. The Growing DDoS Problem... 2 4. DDoS Attack Categories... 4 5. DDoS Mitigation... 5 1 1. Target
More informationFour Steps to Defeat a DDoS Attack
hite Paper Four Steps to Defeat a DDoS Attack Millions of computers around the world are controlled by cybercriminals. These computers, infected with bot malware, automatically connect to command and control
More informationIntroduction to DDoS Attacks. Chris Beal Chief Security Architect MCNC chris.beal@mcnc.org @mcncsecurity on Twitter
Introduction to DDoS Attacks Chris Beal Chief Security Architect MCNC chris.beal@mcnc.org @mcncsecurity on Twitter DDoS in the News Q1 2014 DDoS Attack Trends DDoS Attack Trends Q4 2013 Mobile devices
More informationFour Considerations for Addressing the DDoS Risk for Carrier and Cloud Hosting Providers
Four Considerations for Addressing the DDoS Risk for Carrier and Cloud Hosting Providers Whitepaper SHARE THIS WHITEPAPER Table of Contents The Rising Threat of Cyber-Attack Downtime...3 Four Key Considerations
More informationERT Attack Report. Attacks on Large US Bank During Operation Ababil. March 2013
Attacks on Large US Bank During Operation Ababil March 2013 Table of Contents Executive Summary... 3 Background: Operation Ababil... 3 Servers Enlisted to Launch the Attack... 3 Attack Vectors... 4 Variations
More informationService Description DDoS Mitigation Service
Service Description DDoS Mitigation Service Interoute, Walbrook Building, 195 Marsh Wall, London, E14 9SG, UK Tel: +800 4683 7681 Email: info@interoute.com Contents Contents 1 Introduction...3 2 An Overview...3
More informationProtect your network: planning for (DDoS), Distributed Denial of Service attacks
Protect your network: planning for (DDoS), Distributed Denial of Service attacks Nov 19, 2015 2015 CenturyLink. All Rights Reserved. The CenturyLink mark, pathways logo and certain CenturyLink product
More informationAvailability Digest. www.availabilitydigest.com. Prolexic a DDoS Mitigation Service Provider April 2013
the Availability Digest Prolexic a DDoS Mitigation Service Provider April 2013 Prolexic (www.prolexic.com) is a firm that focuses solely on mitigating Distributed Denial of Service (DDoS) attacks. Headquartered
More informationDDoS ATTACKS: MOTIVES, MECHANISMS AND MITIGATION
DDoS ATTACKS: MOTIVES, MECHANISMS AND MITIGATION Stephen Gates Chief Security Evangelist Corero Network Security Session ID: SEC-W04 Session Classification: Intermediate Recent Headlines Are Denial of
More informationFortiDDos Size isn t everything
FortiDDos Size isn t everything Martijn Duijm Director Sales Engineering April - 2015 Copyright Fortinet Inc. All rights reserved. Agenda 1. DDoS In The News 2. Drawing the Demarcation Line - Does One
More informationA Primer for Distributed Denial of Service (DDoS) Attacks
A Primer for Distributed Denial of Service (DDoS) Attacks Hemant Jain, VP of Engineering Sichao Wang, Director of Product Management April 2012, Fortinet, Inc A Primer for Distributed Denial of Service
More informationA Layperson s Guide To DoS Attacks
A Layperson s Guide To DoS Attacks A Rackspace Whitepaper A Layperson s Guide to DoS Attacks Cover Table of Contents 1. Introduction 2 2. Background on DoS and DDoS Attacks 3 3. Types of DoS Attacks 4
More informationSHARE THIS WHITEPAPER. Attack Mitigation Service Fully Managed Hybrid (Premise & Cloud) Cyber-Attack Mitigation Solution - Whitepaper
SHARE THIS WHITEPAPER Attack Mitigation Service Fully Managed Hybrid (Premise & Cloud) Cyber-Attack Mitigation Solution - Whitepaper Table of Contents Abstract... 3 Recent Worldwide Regulatory Efforts...
More informationMitigating Denial of Service Attacks. Why Crossing Fingers is Not a Strategy
Mitigating Denial of Service Attacks Why Crossing Fingers is Not a Strategy Introduction Mark Baldwin - Owner of Tectonic Security MSSP and Security Consulting Primarily Work With SMBs DDoS Mitigation
More informationDISTRIBUTED DENIAL OF SERVICE OBSERVATIONS
: DDOS ATTACKS DISTRIBUTED DENIAL OF SERVICE OBSERVATIONS 1 DISTRIBUTED DENIAL OF SERVICE OBSERVATIONS NTT is one of the largest Internet providers in the world, with a significant share of the world s
More informationIhr Standort bleibt erreichbar. Ihre Applikationen bleiben erreichbar!
Ihr Standort bleibt erreichbar. Ihre Applikationen bleiben erreichbar! Die hybride DDoS Protection und Application Security Lösung von F5 Networks Arrow Sommerforum München am 16. Juli 2015 e.kampmann@f5.com
More informationHow To Protect Yourself From A Dos/Ddos Attack
RELEVANT. INTELLIGENT. SECURITY White Paper In Denial?...Follow Seven Steps for Better DoS and DDoS Protection www.solutionary.com (866) 333-2133 In Denial?...Follow Seven Steps for Better DoS and DDoS
More informationAnalysis of a DDoS Attack
Analysis of a DDoS Attack December 2014 CONFIDENTIAL CORERO INTERNAL USE ONLY Methodology around DDoS Detection & Mitigation Corero methodology for DDoS protection Initial Configuration Monitoring and
More informationGuide to DDoS Attacks December 2014 Authored by: Lee Myers, SOC Analyst
INTEGRATED INTELLIGENCE CENTER Technical White Paper William F. Pelgrin, CIS President and CEO Guide to DDoS Attacks December 2014 Authored by: Lee Myers, SOC Analyst This Center for Internet Security
More informationProtecting DNS Critical Infrastructure Solution Overview. Radware Attack Mitigation System (AMS) - Whitepaper
Protecting DNS Critical Infrastructure Solution Overview Radware Attack Mitigation System (AMS) - Whitepaper Table of Contents Introduction...3 DNS DDoS Attacks are Growing and Evolving...3 Challenges
More informationProtecting against DoS/DDoS Attacks with FortiWeb Web Application Firewall
Protecting against DoS/DDoS Attacks with FortiWeb Web Application Firewall A FORTINET WHITE PAPER www.fortinet.com Introduction Denial of Service attacks are rapidly becoming a popular attack vector used
More informationData Centers Protection from DoS attacks. Trends and solutions. Michael Soukonnik, Radware Ltd michaels@radware.com Riga. Baltic IT&T. 21.04.
Data Centers Protection from DoS attacks. Trends and solutions Michael Soukonnik, Radware Ltd michaels@radware.com Riga. Baltic IT&T. 21.04.2010 Cybercrime Trends Page 2 Types of DoS attacks and classical
More informationDDoS Protection on the Security Gateway
DDoS Protection on the Security Gateway Best Practices 24 August 2014 Protected 2014 Check Point Software Technologies Ltd. All rights reserved. This product and related documentation are protected by
More informationDDoS Attacks - Peeling the Onion on One of the Most Sophisticated Ever Seen. Eldad Chai, VP Product
DDoS Attacks - Peeling the Onion on One of the Most Sophisticated Ever Seen Eldad Chai, VP Product Incapsula Application Delivery from the Cloud 2 DDoS 101 ISP Network Devices Web servers Applications
More informationGlobal DDoS Prevention Market 2014-2018
Brochure More information from http://www.researchandmarkets.com/reports/2970654/ Global DDoS Prevention Market 2014-2018 Description: About DDoS Prevention A DDoS attack is a malicious attempt to disrupt
More informationDistributed Denial of Service (DDoS) attacks. Imminent danger for financial systems. Tata Communications Arbor Networks.
Distributed Denial of Service (DDoS) attacks Imminent danger for financial systems Presented by Tata Communications Arbor Networks 1 Agenda Importance of DDoS for BFSI DDoS Industry Trends DDoS Technology
More informationDistributed Denial of Service protection
Distributed Denial of Service protection The cost in terms of lost business caused by a successful DDoS attacks can be significant. Our solution recognises when a DDoS attack is happening and identifies
More informationCS 356 Lecture 16 Denial of Service. Spring 2013
CS 356 Lecture 16 Denial of Service Spring 2013 Review Chapter 1: Basic Concepts and Terminology Chapter 2: Basic Cryptographic Tools Chapter 3 User Authentication Chapter 4 Access Control Lists Chapter
More informationCheap and efficient anti-ddos solution
Cheap and efficient anti-ddos solution Who am I? Alexei Cioban Experience in IT 13 years CEO & Founder IT-LAB 7 years IT trainings 5 years 2 About company Year of foundation - 2007 12 employees www.it-lab.md
More informationDDoS Threat Report. Chris Beal Chief Security Architect MCNC chris.beal@mcnc.org @mcncsecurity on Twitter
DDoS Threat Report Insights on Finding, Fighting, and Living with DDoS Attacks v1.1 Chris Beal Chief Security Architect MCNC chris.beal@mcnc.org @mcncsecurity on Twitter DDoS in the News - 2014 DDoS Trends
More informationwww.prolexic.com Stop DDoS Attacks in Minutes
www.prolexic.com Stop DDoS Attacks in Minutes Prolexic gives us the strong insurance policy against DDoS attacks that we were looking for. Mark Johnson, Chief Financial Officer, RealVision You ve seen
More informationHow To Protect A Dns Authority Server From A Flood Attack
the Availability Digest @availabilitydig Surviving DNS DDoS Attacks November 2013 DDoS attacks are on the rise. A DDoS attack launches a massive amount of traffic to a website to overwhelm it to the point
More informationITRC Forum 2014 萬 雲 皆 有 險 : 雲 計 算 的 安 全 怎 影 響 你 的 管 理 概 念
ITRC Forum 2014 萬 雲 皆 有 險 : 雲 計 算 的 安 全 怎 影 響 你 的 管 理 概 念 How Cloud Computing Can Rain on Your IT Management Strategy By Roger Lee Presentation for ITRC Forum 2014 11 Dec 2014 (Thu) Agenda Response to
More informationDDoS Attack and Its Defense
DDoS Attack and Its Defense 1 DDoS attacks are weapons of mass disruption. The DDoS attack has long been a big main threat to security of the Internet. It is not expensive and easy to be used for achieving
More informationArbor s Solution for ISP
Arbor s Solution for ISP Recent Attack Cases DDoS is an Exploding & Evolving Trend More Attack Motivations Geopolitical Burma taken offline by DDOS attack Protests Extortion Visa, PayPal, and MasterCard
More information2011 Global Application
20 11 Global Application & Network Security Report 2011 Global Application & Network Security Report Smart Network. Smart Business. Table of Contents 01 02 03 Executive Summary» Most important findings
More informationHow valuable DDoS mitigation hardware is for Layer 7 Sophisticated attacks
How valuable DDoS mitigation hardware is for Layer 7 Sophisticated attacks Stop DDoS before they stop you! James Braunegg (Micron 21) What Is Distributed Denial of Service A Denial of Service attack (DoS)
More informationDDoS Attack Mitigation Report. Media & Entertainment Finance, Banking & Insurance. Retail
DDoS Attack Mitigation Report Media & Entertainment Finance, Banking & Insurance Retail DDoS Attack Mitigation Report Media & Entertainment Attack on Spanish-Language News Site is Abandoned When Traffic
More informationFirewall Firewall August, 2003
Firewall August, 2003 1 Firewall and Access Control This product also serves as an Internet firewall, not only does it provide a natural firewall function (Network Address Translation, NAT), but it also
More informationDDoS Mitigation Techniques
DDoS Mitigation Techniques Ron Winward, ServerCentral CHI-NOG 03 06/14/14 Consistent Bottlenecks in DDoS Attacks 1. The server that is under attack 2. The firewall in front of the network 3. The internet
More informationDDoS DETECTING. DDoS ATTACKS WITH INFRASTRUCTURE MONITORING. [ Executive Brief ] Your data isn t safe. And neither is your website or your business.
[ Executive Brief ] DDoS DETECTING DDoS ATTACKS WITH INFRASTRUCTURE MONITORING. Your data isn t safe. And neither is your website or your business. Hacking has become more prevalent and more sophisticated
More informationAutomated Mitigation of the Largest and Smartest DDoS Attacks
Datasheet Protection Automated Mitigation of the Largest and Smartest Attacks Incapsula secures websites against the largest and smartest types of attacks - including network, protocol and application
More informationHOW TO PREVENT DDOS ATTACKS IN A SERVICE PROVIDER ENVIRONMENT
HOW TO PREVENT DDOS ATTACKS IN A SERVICE PROVIDER ENVIRONMENT The frequency and sophistication of Distributed Denial of Service attacks (DDoS) on the Internet are rapidly increasing. Most of the earliest
More informationRadware s Behavioral Server Cracking Protection
Radware s Behavioral Server Cracking Protection A DefensePro Whitepaper By Renaud Bidou Senior Security Specialist,Radware October 2007 www.radware.com Page - 2 - Table of Contents Abstract...3 Information
More informationApplication Security Backgrounder
Essential Intrusion Prevention System (IPS) & DoS Protection Knowledge for IT Managers October 2006 North America Radware Inc. 575 Corporate Dr., Lobby 1 Mahwah, NJ 07430 Tel: (888) 234-5763 International
More informationHow To Attack A Website With An Asymmetric Attack
DEFENDING AGAINST LOW-BANDWIDTH, ASYMMETRIC DENIAL-OF-SERVICE ATTACKS David W. Holmes (@dholmesf5) F5 Networks Session ID: HT-R02 Session Classification: Intermediate AGENDA Introduction Why does this
More informationWeb Application Defence. Architecture Paper
Web Application Defence Architecture Paper June 2014 Glossary BGP Botnet DDoS DMZ DoS HTTP HTTPS IDS IP IPS LOIC NFV NGFW SDN SQL SSL TCP TLS UTM WAF XSS Border Gateway Protocol A group of compromised
More informationStop DDoS Attacks in Minutes
PREVENTIA Forward Thinking Security Solutions Stop DDoS Attacks in Minutes 1 On average there are more than 7,000 DDoS attacks observed daily. You ve seen the headlines. Distributed Denial of Service (DDoS)
More informationFirst Line of Defense
First Line of Defense SecureWatch ANALYTICS FIRST LINE OF DEFENSE OVERVIEW KEY BENEFITS Comprehensive Visibility Gain comprehensive visibility into DDoS attacks and cyber-threats with easily accessible
More informationCheck Point DDoS Protector
Check Point DDoS Protector June 2012 2012 Check Point Software Technologies Ltd. [PROTECTED] All rights reserved. 2012 Check Point Software Technologies Ltd. [PROTECTED] All rights reserved. Cybercrime
More informationSHARE THE ERT REPORT GLOBAL APPLICATION & NETWORK
SHARE THE ERT REPORT GLOBAL APPLICATION & NETWORK S E C U R I T Y R E P O R T 2012 Table of Contents 01 02 03 Executive Summary» Most important findings Introduction» Scope of the Report» Industry Security
More informationHow To Stop A Ddos Attack On A Website From Being Successful
White paper Combating DoS/DDoS Attacks Using Cyberoam Eliminating the DDoS Threat by Discouraging the Spread of Botnets www.cyberoam.com Introduction Denial of Service (DoS) and Distributed Denial of Service
More informationAre you safe from DDoS attacks?
www.harppddos.com HARPP DDoS Mitigator Appliances and DDoS CERT The HARPP DDoS Mitigator s unique DDI (Deep DDoS Inspection) and AVS (Attack Visualization System) provide unparalleled protection of your
More informationFerramentas de Ataques de DDoS e a Evolução de ameaças a disponibilidade contra serviços Internet. Julio Arruda Gerente America Latina Engenharia
Ferramentas de Ataques de DDoS e a Evolução de ameaças a disponibilidade contra serviços Internet Julio Arruda Gerente America Latina Engenharia Agenda The Affect of DDoS on Business DDoS Statistics, Motivations
More informationDDoS Protection. How Cisco IT Protects Against Distributed Denial of Service Attacks. A Cisco on Cisco Case Study: Inside Cisco IT
DDoS Protection How Cisco IT Protects Against Distributed Denial of Service Attacks A Cisco on Cisco Case Study: Inside Cisco IT 1 Overview Challenge: Prevent low-bandwidth DDoS attacks coming from a broad
More informationDefending Against Application-Based DDoS Attacks with the Barracuda Web Application Firewall. White Paper
Defending Against Application-Based DDoS Attacks with the Barracuda Web Application Firewall White Paper Executive Summary In the past, DDoS attacks were largely volume-based with the intent to overwhelm
More informationManage the unexpected
Manage the unexpected Navigate risks and thrive Today s business world is threatened by a multitude of online security risks. But many organizations simply do not have the resources or expertise to combat
More informationJUST FOR THOSE WHO CAN T TOLERATE DOWNTIME WE ARE NOT FOR EVERYONE
WE ARE NOT FOR EVERYONE JUST FOR THOSE WHO CAN T TOLERATE DOWNTIME Don t let a DDoS attack bring your online business to a halt we can protect any server in any location DON T GET STUCK ON THE ROAD OF
More informationKASPERSKY DDOS PROTECTION. Discover how Kaspersky Lab defends businesses against DDoS attacks
KASPERSKY DDOS PROTECTION Discover how Kaspersky Lab defends businesses against DDoS attacks CYBERCRIMINALS ARE TARGETING BUSINESSES If your business has ever suffered a Distributed Denial of Service (DDoS)
More informationWhat to Look for When Choosing a CDN for DDoS Protection Written by Bizety
What to Look for When Choosing a CDN for DDoS Protection Written by Bizety WHITE PAPER Introduction Every online company should be familiar with Distributed Denial of Service (DDoS) attacks and the risk
More informationSecuring data centres: How we are positioned as your ISP provider to prevent online attacks.
Securing data centres: How we are positioned as your ISP provider to prevent online attacks. Executive Summary In today s technologically-demanding world, an organisation that experiences any internet
More informationDenial of Service Attacks, What They are and How to Combat Them
Denial of Service Attacks, What They are and How to Combat Them John P. Pironti, CISSP Genuity, Inc. Principal Enterprise Solutions Architect Principal Security Consultant Version 1.0 November 12, 2001
More informationCloud Security In Your Contingency Plans
Cloud Security In Your Contingency Plans Jerry Lock Security Sales Lead, Greater China Contingency Plans Avoid data theft and downtime by extending the security perimeter outside the data-center and protect
More informationTechnical Series. A Prolexic White Paper. 12 Questions to Ask a DDoS Mitigation Provider
A Prolexic White Paper 12 Questions to Ask a DDoS Mitigation Provider Introduction Distributed Denial of Service (DDoS) attacks continue to make global headlines, but an important facet of each incident
More informationCHAPTER 4 : CASE STUDY WEB APPLICATION DDOS ATTACK GLOBAL THREAT INTELLIGENCE REPORT 2015 :: COPYRIGHT 2015 NTT INNOVATION INSTITUTE 1 LLC
: CASE STUDY WEB APPLICATION DDOS ATTACK 1 WEB APPLICATION DDOS ATTACK CASE STUDY MORAL Ensuring you have DoS/DDoS protection in place, before you are attacked, can pay off. OVERVIEW XYZ Corp (name changed
More informationComplete Protection against Evolving DDoS Threats
Complete Protection against Evolving DDoS Threats AhnLab, Inc. Table of Contents Introduction... 2 The Evolution of DDoS Attacks... 2 Typical Protection against DDoS Attacks... 3 Firewalls... 3 Intrusion
More informationProtect Your Infrastructure from Multi-Layer DDoS Attacks
Protect Your Infrastructure from Multi-Layer DDoS Attacks F5 EMEA Webinar February 2014 Presenter: Keiron Shepherd Title: Field Systems Engineer Protecting Against DDoS is Challenging Webification of apps
More informationRadware Solutions for NGDC
Radware Solutions for NGDC Ofir Hatsor, June 2011 Main Drivers for NGDC Eliminate Costs of Downtime Improve Customer Experience & Employee Productivity Cut Application Infrastructure Cost by 20-50% Enhance
More informationTLP WHITE. Denial of service attacks: what you need to know
Denial of service attacks: what you need to know Contents Introduction... 2 What is DOS and how does it work?... 2 DDOS... 4 Why are they used?... 5 Take action... 6 Firewalls, antivirus and updates...
More informationAKAMAI SOLUTION BROCHURE CLOUD SECURITY SOLUTIONS FAST RELIABLE SECURE.
CLOUD SECURITY SOLUTIONS FAST RELIABLE SECURE. Threat > The number and size of cyberattacks are increasing rapidly Website availability and rapid performance are critical factors in determining the success
More informationExecutive Suite Series A Prolexic White Paper
A Prolexic White Paper DDoS Denial of Service Protection and the Cloud Introduction Cloud computing ( the cloud ) has transformed the way that the world s businesses deploy and share applications and IT
More information