DDoS Mitigation - DefensePro - RADWARE

Editor's Notes

• #4: Cyber-attacks have reached a tipping point in terms of quantity, length, complexity and targets. Extra-large attacks are seen on a daily basis—and these attacks are targeting all types of organizations. In 2014, one in seven attacks was larger than 10G. And we've seen attacks in the 100Gbps+ size range. Attacks are evolving to become longer, larger and more sophisticated. Beyond just the growth in high-volume attacks, we are seeing constant attacks on the rise. In Radware's 2014-2015 report on the threat landscape, almost 20% of respondents report that they were continuously under attacks in 2014.
• #5: Threats have expanded to a broader range of industries, organizational sizes and technology deployments.
• #6: Continuing a four-year trend, cyber-attacks were again split evenly between the network and application levels. That’s because attackers’ “interest” lies in multi-sector blended attacks. Web attacks remain the single most common attack vector; for every four web-based attacks, three target HTTP and one is an HTTPS attack. Reflective attacks started heating up in 2013 and remained a persistent threat throughout 2014. While most of 2013’s reflected attacks targeted DNS, we saw more UDP based (NTP, CHARGEN) reflective attacks in 2014. Which is why we see UDP attacks in general increased from 7% in 2013 to 16% in 2014. What makes reflective attacks effective is the ease with which they can be generated— and the impact they can have on a network. Reflected attacks make it comparatively easy not only to generate an extra-large attack but also to sustain it for an extended period.
• #7: Attackers are deploying multi-vulnerability attack campaigns by increasing the number of attack VECTORS they launch in parallel. To target your blind spot, different attack vectors target different layers of the network and data center, for example Net DDoS, App DDoS, Low & slow, SSL attacks and Web attacks. Even If only one vector will go undetected then the attack is successful and the result is highly destructive To effectively mitigate all type of DoS/DDoS attacks you need to go beyond protection at the network layer and implement a solution that gives you protection from the wide range of attacks types across all layers of the infrastructure.  DoS protection to detect and mitigate all type of network DDoS attacks  Behavioral Analysis to protect against application DDoS and misuse attacks. Behavioral-based real-time signatures and challenge-response mechanism can block the attack traffic accurately without blocking legitimate user traffic.  IPS to block known attack tools and the low and slow attacks  SSL protection to protect against encrypted flood attacks  WAF, web application firewall, to prevent web application vulnerability exploitations
• #8: Organizations need comprehensive protection and high performance to protect from both sophisticated and volumetric attacks. Carriers and cloud providers today Need to support a growing number of customers with increased complexity and capacity. Require high end devices that can handle all the scale items (mitigation, bandwidth, complexity and number of served customers). Current competitor offerings today require to chose between high performance and attack mitigation coverage/quality A10 (Thunder 6630 ADC or 6435 TPS) – relatively strong performance but limited attack coverage (only SYN floods on the ADC device, no behavioral on the TPS) F5 (BIG-IP 10250) – high/medium performance (80Gbps, 850M CPS) with limited attack coverage (L3 only) Arbor (Peakflow TMS) – good attack coverage but limited performance (40 Gbps, 40 Mpps + 10G ports)
• #10: The industry's most advanced and highest performance attack mitigation platform. You no longer have to choose between performance and quality of protection. Attack mitigation platform that goes beyond just SYN flood protection to offer a wide range of protections at high mitigation capacity, including UDP reflection attacks, fragmented and out-of-stack floods. Industry leading defense breadth: Up to 300Gbps throughput inspection while allowing customers to enjoy the widest range of simultaneous cyber-attack protection in the industry. Industry leading defense depth: 230M PPS anti-DDoS along with best-in-class DNS, SIP, SMTP, HTTPS, and other application protections. Commercial grade out-of-the-box compliance and customer tenancy managing over 1,000 policies in a secure Role-Based Access control format. First dedicated attack mitigation platform to offer 100G interfaces – providing best in class attack detection and mitigation in the most demanding operational environments.