DDoS (Distributed Denial of Service) Attack

-


Your army against their army

You don’t need to have enemies to fall vulnerable to Distributed Denial of service (DDoS) attacks. A recent survey from McAfee states that 80% of respondents, who represented different organizations across the world, said that they have faced a DDoS attack.

What is DDoS?

Distributed Denial of Services:

  • Goal: make a service unusable
  • How: overload a server, router, network link
  • Focus: bandwidth attacks

Increased Frequency:

  • 35% of responded see 10 or more DDoS attack per month compared to 18% in 2009

Here’s a snapshot of that survey:

DDoS - Distributed Denial of Service
Distributed Denial of Service attacks cost an average enterprise $6.3M for a 24-hour outage 

Reality check

Are your systems protected against?

  • Unavailability of network / applications
  • Business loss
  • Brand impact if network/application is customer facing
  • Bandwidth usage shoots up
  • Hardware failures (servers, routers, firewalls, etc.)
    MDDoS in Action
  • DDoS attack

    MDDoS coverage and benefits include

    • Comprehensive and reliable DDoS defense
    • Network visibility and application insight
    • Detection and defense against attacks on bandwidth and infrastructure
    • Application layer intelligence and protection
    • Baseline enforcement
    • Detection and defense against targeted attacks on critical applications.
    • Dedicated bandwidth scrubbing of upto 1 Gbps
    • Global attack intelligence, active threat feed and fingerprinting
    This service is backed by industry leading SLAs to provide a powerful service to counter threats and attacks on the IT infrastructure of its customers.

    Compare and choose the right MDDoS package

    MDDoS is offered in three off-the-shelf packages – Basic, Advanced and Comprehensive apart from custom solution that can be developed based on your requirement. Here is what each of them have to offer:
     BronzeSilverGold
    DDoS attack detection and mitigationYYY
    Advanced Reporting YY
    Limit on number of mitigationsLimitedLimitedUnlimited
    Mitigation CapacitySharedSharedDedicated
    Web Portal Access  Y
Protect Your Business visit : RED ZONE DIGITAL SECURITIES

Comments

Post a Comment

Popular posts from this blog

AntiCloud Trojan Reverse Engineering Analysis

-
Image
Introduction In this paper we are going to talk about the Anticloud Trojan, also know as the  TrojanDropper:Win32/Bohu.A and  B  variant. This malware originated in China and was designed to target the Cloud-Based Technology of major Chinese AntiVirus Vendors. For this reason, Bohu has also been called  AntiCloud Trojan . This is the first malware to specifically target cloud based technologies and will likely set a trend. As more corporations and governments move applications and services into the cloud, it will become an increasingly important target for malware developers. We can expect sophisticated malware that attacks clients and embeds itself into cloud-based apps, potentially without the user being able to determine that the cloud-based service is compromised. This trojan presents some interesting features, such as: Hash Check Evasion. Packet Interception via NDIS Filter. Cloud-Servers Access Lock via SPI network filter in order to Bypass antivirus Detection. So
Read more

SQL Injection: The Equal Opportunity Vulnerability

-
Image
Introduction In the  first installment of this series , we discussed application security within the Software Development Process by demystifying the adoption of security controls within the development organization. We also took a deeper dive into identifying potential vulnerabilities based on threats to attack surfaces exposed to the application, a process known as threat modeling. In this installment, we are going to take a technical dive into specific vulnerabilities that can be used to compromise the attack surfaces and discuss what is arguably one of the most prevalent attacks to applications and inflicts the most exposure of sensitive data: SQL Injection. Injection attacks attempt to infiltrate an application by injecting malicious content into the application through available input channels. Input channels can be in the form of form fields, uploads, 3 rd  party API, data access channels, configuration files, input files: essentially, any point at which the application r
Read more

Secure Sockets Layer (SSL)

-
Image
Secure Sockets Layer (SSL): How It Works What Happens When a Browser Encounters SSL > A browser attempts to connect to a website secured with SSL. > The browser requests that the web server identify itself. > The server sends the browser a copy of its SSL Certificate. > The browser checks whether it trusts the SSL Certificate. If so, it sends a    message to the server. > The server sends back a digitally signed acknowledgement to start an SSL encrypted session. > Encrypted data is shared between the browser and the server. Encryption Protects Data During Transmission Web servers and web browsers rely on the Secure Sockets Layer (SSL) protocol to help users protect their data during transfer by create a uniquely encrypted channel for private communications over the public Internet. Each SSL Certificate consists of a key pair as well as verified identification information. When a web browser (or client) points to a secured website, th
Read more