akamai s [state of the internet] Q executive review

Transcription

1 akamai s [state of the internet] Q executive review

2 about the review / Akamai, the world s leading content delivery network (CDN) provider, uses its globally distributed Intelligent Platform TM to process approximately 2 trillion Internet transactions each day. This allows us to gather massive amounts of data on many metrics related to broadband connectivity, cloud security and media delivery. The State of the Internet program was built to leverage that data to better enable businesses and governments to make intelligent, strategic decisions. Each quarter, Akamai uses this data to publish reports in the State of the Internet program focused on broadband connectivity and cloud security. 2

3 GLOBAL BROADBAND LEADERS 5.1 Mbps / Global Average Connection Speed 32.2 Mbps / Global Average Peak Connection Speed internet and broadband adoption / The State of the Internet / Connectivity Report is now in its 8 th year of publication. In it, Akamai reports extensively on Internet connection speeds, network connectivity/availability issues, and IPv6 adoption progress. Global Top 10 / Average Connection Speeds Country/Region Avg. Mbps Global South Korea Sweden Norway Switzerland Hong Kong Netherlands Japan Finland Latvia Czech Republic 14.5 Global Top 10 / Average Peak Connection Speeds Country/Region Peak Mbps Global Singapore Hong Kong South Korea Japan Taiwan Qatar Macao Romania Israel Sweden

4 Broadband Adoption / This section illustrates the global leaders with the highest percentage of unique ip addresses connecting to Akamai with average connection speeds above four separate thresholds. 4+ Mbps 96% 10+ Mbps 68% 15+ Mbps 45% 25+ Mbps 24% Bulgaria/ South Korea South Korea South Korea South Korea DOWNLOAD THE FULL REPORT TAP HERE IPv4 Exhaustion and IPv6 Adoption / Country with the highest percentage of content requests made to Akamai over IPV6: 35% OF TRAFFIC OVER IPv6 Belgium Available IPv4 Space Continues Steady Decline: Available IPv4 Address Pool Size by RIR, IPv4 Addresses (Millions) AFRINIC APNIC LACNIC RIPENCC 0 1-Jul 8-Jul 15-Jul 22-Jul 29-Jul 5-Aug 12-Aug 19-Aug 26-Aug 9-Sep 16-Sep 23-Sep 30-Sep ARIN 4

5 Total Number of IPv4 Address Pool Size by RIR, IPv4 Addresses (Millions) AFRINIC APNIC LACNIC RIPENCC Jul 8-Jul 15-Jul 22-Jul 29-Jul 5-Aug 12-Aug 19-Aug 26-Aug 9-Sep 16-Sep 23-Sep 30-Sep ARIN 5

6 CLOUD SECURITY YEAR-OVER-YEAR STATS [Q ] 180% increase in total DDoS attacks 66% decrease in average peak bandwidth 89% decrease in average peak packets per second 26% increase in application layer attacks 198% increase in infrastructure layer attacks 16% decrease in average attack duration SSDP attacks: 0 vs. 16% of all attacks LARGEST ATTACK 149 Gbps Q Gbps Cloud Security / The q State of the Internet / Security Report combines the DDoS attack data previously published in the classic State of the Internet Report with the data previously published in the quarterly Prolexic DDoS Attack Report. DDoS Update / Attack activity over our network jumped again this quarter, setting a record for the number of DDoS attacks. At the same time, average peak bandwidth and packets-per-second have been dropping, a trend continued from q2. The use of reflection-based DDoS methods by DDoS-for-hire sites resulted in smaller attacks on average than we have observed from infection-based botnets. Akamai tracked nine infrastructure-layer reflection attack vectors, including the three newer reflection attacks: NetBIOS, Sentinel, and rpc. There were eight mega attacks greater than 100 gigabits per second (Gbps), with the largest at 149 Gbps. Half of all attacks were between 400 Mbps to 5 Gbps. The online gaming sector was hit particularly hard in q3, accounting for half of all DDoS attacks. Media and entertainment faced more of the biggest DDoS attacks. 6

7 DDoS Size as a Function of Time Gbps Q Q Q Q Q Q Q Q Q DDoS attacks from Q to. Each dot represents a DDoS attack, and each interval covers a 10-fold increase in attack size q3 marks the first time Akamai Edge Firewall data is analyzed in the report. Edge Firewall data sets provide a broad look at attack activity at the global platform perimeter with information on attack traffic coming from 200,000 machines outfitted with Akamai. The data was used to identify more than 1.5 million DDoS reflectors on a geographical heatmap. DDoS Reflector Heatmap, A geographical heat map of victim SSDP, CHARGEN, NTP and QOTD reflectors in 7

8 attack spotlight / When it comes to DDoS attacks, high bandwidth is usually the most notable metric, but a high packet-per-second rate can also be devastating. In q3, Akamai mitigated an attack that would require at least 145 Gbps of available bandwidth just to withstand its brunt. Further, the attack generated a record-setting 222 million packets-per-second (Mpps). Top 5 source countries for DDoS attacks in Q3 / Non-spoofed attacking IP addresses by source country for DDoS attacks mitigated during UK / 26% China / 21% USA / 17% India / 7% Spain / 7% web application attack statistics / Last quarter Shellshock over https dominated web application attacks observed by Akamai, but this was not the case in q3. Local file inclusion (lfi) and sql injection (SQLi) attacks over http were by far the most prevalent web application attack vectors in q3. There was a notable increase in WordPress plugin attack attempts, not only for popular plugins but also for less-known vulnerable plugins. Web application attacks rely heavily on botnets that take advantage of unsecured home-based routers and devices. The retail industry was hit hardest, receiving 55% of web application attacks, with the financial services industry a distant second, receiving 15% of attacks. The u.s. was the main source of web application attacks (59%), and sites within the u.s. in were the most common target (75%). 8

9 Web Application Attacks by Industry, Percentage Financial Services 7.99 Media & Entertainment 7.24 Public Sector 7.16 Hotel & Travel 2.62 High Technology 1.59 Consumer Goods 1.49 Gaming 2.69 Other Retail Retail Percentage Retail suffered the vast majority of web application attacks in 55% 9

10 [state of the internet] Editor David Belson Design Shawn Doughty, Creative Direction Brendan O Hara, Art Direction/Design Contact stateoftheinternet@akamai.com [state of the internet] / security Content David Fernandez, Editor in Chief Bill Brenner, Managing Editor Jose Arteaga, Data Visualization and Research Ezra Caltum, Web Application Threat Research Martin McKeay, Senior Editor Contributors Dave Lewis, Editor Jon Thompson, Threat Data Modeling Patrick Laverty, Research Larry Cashdollar, Research Chad Seaman, Research Design Shawn Doughty, Creative Direction Brendan O Hara, Art Direction/Design Contact stateoftheinternet@akamai.com Download the Full Reports [state of the internet] report [state of the internet] / security report As the global leader in Content Delivery Network (cdn) services, Akamai makes the Internet fast, reliable and secure for its customers. The company s advanced web performance, mobile performance, cloud security and media delivery solutions are revolutionizing how businesses optimize consumer, enterprise and entertainment experiences for any device, anywhere. To learn how Akamai solutions and its team of Internet experts are helping businesses move faster forward, please visit or blogs.akamai.com, and on Twitter. Akamai is headquartered in Cambridge, Massachusetts in the United States with operations in more than 57 offices around the world. Our services and renowned customer care are designed to enable businesses to provide an unparalleled Internet experience for their customers worldwide. Addresses, phone numbers and contact information for all locations are listed on Akamai Technologies, Inc. All Rights Reserved. Reproduction in whole or in part in any form or medium without express written permission is prohibited. Akamai and the Akamai wave logo are registered trademarks. Other trademarks contained herein are the property of their respective owners. Akamai believes that the information in this publication is accurate as of its publication date; such information is subject to change without notice. Published 12/15.