DDoS Attack Threats
A Distributed Denial-of-Services attack can pretty much be related to a traffic jam. Just like vehicles are slowed down or even get stalled by a traffic jam, numerous malicious IP packets flood the network and prevent legitimate requests from reaching your server. DDoS attacks are relatively cheap to launch these days, though they often require significant resources to mitigate against.
Out team has been successfully mitigating against DDoS attacks for years. Based on our vast experience we've developed a solution combining both hardware and proprietary software components that will protect your web property against DDoS attacks of all types with SLA guarantee.
Types of Web Based Attacks
Typically a Distributed Denial-of-Service (DDoS) attack involves numerous compromised devices across the globe which are often referred to as a Botnet, whereas a Denial-of-Service (DoS) attack can be launched from a single device connected to the Internet. Most web based attacks, whether it is a DoS or a DDoS attack, can be divided into three major categories: volume based attacks, attacks targeting core web protocols and application layer attacks. Some of these attacks can bring down a server, whereas others are capable of knocking out the whole network segment.
Read More
Volumetric Attacks
Volume based atacks are the most common types of web based threats making up of almost 65% of all registered ones. The goal of these attacks is to consume bandwidth capacity of the target server or network and render it unreachable to legitimate requests. UDP/ICMP and other spoofed-packet floods fall under this catefory. The scale of volumetric attacks is measured in bits per second (Bps), or more typically in Gigabits per second (Gbps).
Protocol Attacks
The target of protocol based attacks is to consume hardware resources of application servers and network equipment including firewall and load balancers rather than saturating bandwidth. Most common examples of this type of DDoS attacks are fragmented packet attacks, SYN floods, Smurf DDoS and Ping of Death. DDoS attacks targeting hardware resources are measured in packets per second (Pps) or more typically Mpps which stands for million packets per second.
Application Layer Attacks
The trickiest type of DDoS attacks targets web servers and operating system vulnerabilities. These attacks can be extremely effective yet very difficult to detect and mitigate against, as they tend to mimic legitimate and virtually harmless requests. GET/POST floods, attacks that target web servers such as Apache and Nginx or critical Windows and Linux OS flaws fall under this category. The scale of Application Layer Attacks is often measured in Requests per second (Rps).
