BACKGROUND IMAGE: iSTOCK/GETTY IMAGES
How to attack DDoS threats with a solid defense plan
-
Article
Preventing DoS attacks: The best ways to defend the enterprise
Preventing DoS attacks may not always be possible, but with a strong defense, enterprises can reduce their impact and recover quickly. Expert Kevin Beaver explains the best approaches. Read Now
-
Article
Sharpen your DDoS detection skills with the right tool
DDoS detection and prevention tools are more sophisticated than ever. But finding the right one for your company takes studying and asking vendors the right questions. Read Now
-
Article
Preventing various types of DDoS attacks on your enterprise's systems
The types of DDoS attacks organizations face have grown and size of these attacks has increased. Expert Michael Cobb explains how to secure systems against common DDoS methods. Read Now
-
Article
Tool time: Picking DDoS prevention products
DDoS prevention is an urgent security need for any company. Learn how to select the products and services that will best strengthen your defense against denial-of-service attacks. Read Now
Editor's note
"Delay is the deadliest form of denial," said British historian C. Northcote Parkinson. He was writing a century ago, but his words still ring true. Especially when it comes to coping with distributed denial-of-service (DDoS) attacks, which are growing more sophisticated and destructive. But you can attack DDoS threats by understanding them and preparing your defense and response strategies.
This guide delves into all aspects of the DDoS threat. It includes information on the most recent news-making attacks and explains steps you can take right now to protect your systems. It also explores how to create an effective defense strategy to counter DDoS now and in the future.
Not surprisingly, the best offense when it comes to DDoS is a good defense -- that is, a thought-out and well-tested anti-DDoS program. That you'll face a DDoS attack in your career is inevitable. Read on to get up to date on the DDoS attacks coming at you and plan your response now.
1Knowledge is power: Reports on recent attacks and attack responses
Some recent DDoS attacks paint a scary picture. There are also recent reports that a hacker who needs tech help can now hire it for dollars an hour. Other reports show that often a DDoS attack might be camouflage for something far worse. Learn about recent attacks here and the anti-DDoS programs some organizations are using to thwart them.
-
Article
Powerful DDoS attacks leveraging IoT devices hit several companies
A series of potent, record-setting DDoS attacks hit several targets last week and apparently used IoT malware to infect and leverage a large number of internet connect devices. Read Now
-
Article
Ransom DDoS attacks on the rise
The use of distributed denial of service (DDoS) attacks to extort money from organisations is on the rise, warns security firm Kaspersky Lab Read Now
-
Article
CLDAP reflection attacks may be the next big DDoS technique
Security researchers discovered a new reflection attack method using CLDAP that can be used to generate destructive but efficient DDoS campaigns. Read Now
-
Article
Corero: Telecom carriers have fallen behind on DDoS defense
Corero Network Security's Dave Larson talks with SearchSecurity about how DDoS defense has changed and why telecom service providers have struggled to keep up with new threats. Read Now
2Solid steps to take now to prevent DDoS attacks
In recent years, DDoS attacks have risen to record levels. Now is the time to protect your enterprise systems and attack DDoS. In this section, our experts show you how with directed, practical advice.
-
Article
Cloud DDoS protection: What enterprises need to know
DDoS attacks are a continuing problem, and enterprises should consider using cloud DDoS protection services. Expert Frank Siemons discusses the cloud options. Read Now
-
Article
DDoS attacks on your DNS provider: Developing a response strategy
Learn from DNS provider NS1's experience with a DDoS attack. Expert Kevin Beaver has tips on developing a mitigation response for a DNS outage in your own enterprise. Read Now
-
Article
Create a cloud DDoS protection plan
Hackers don't just steal data; they can also crash applications with spam requests and traffic. Protect your cloud against DDoS attacks by employing these tools and techniques. Read Now
-
Article
How to prepare for a cloud DDoS attack on an enterprise
Suffering a cloud DDoS attack is now more likely than ever. Expert Frank Siemons discusses what enterprises need to know about these attacks and how to prevent them. Read Now
3How best to attack DDoS threats? With an ever-evolving strategy
As in all things security, the threat is always moving and morphing. In this section our experts cover the latest in DDoS threats, including attacks in the cloud and in the SSDP protocol, among other things. Learn how DDoS attacks are evolving and what you can do to keep your anti-DDoS program up-to-date and effective.
-
Article
DDoS mitigation services: What to consider before implementation
Before implementing DDoS mitigation services, there are a few things enterprises should consider. Expert Ed Moyle discusses the steps to take to improve security. Read Now
-
Article
DDoS a top security and business issue, study shows
DNS should be at the core of information security strategies as DDoS attacks increasingly form part of wider cyber attacks and continue to ramp up to unprecedented levels, warns Neustar Read Now
-
Article
More DDoS DNS amplification attacks use SSDP than NTP
Black Hat: New research finds DDoS DNS amplification attacks are more likely to use SSDP than NTP and DDoS attacks may generally be smaller than reported. Read Now
4To speak the language of DDoS defense, learn these key terms
Every aspect of IT comes with its own specialized terms; why would it be any different with DDoS? Here are some key terms you need to have under your belt as you make plans to attack DDoS.
-
Definition
Ping of Death
Versenden Angreifer übergroße ICMP-Pakete, kann es zu Buffer Overflow und damit zum Absturz des Systems kommen. Dies nennt man „Ping of Death“. Read Now
-
Definition
spoof
Spoof was a game involving trickery and nonsense that was invented by an English comedian, Arthur Roberts, prior to 1884, when it is recorded as having been "revived. Read Now
-
Definition
Domain Name System (DNS)
Domain Name System ist die Methode, wie im Internet Domänennamen lokalisiert und in IP-Adressen übersetzt werden. Sie sind einfacher als IP-Adressen. Read Now
-
Definition
zombie computer (zombie bot)
A zombie (also known as a bot) is a computer that a remote attacker has accessed and set up to forward transmissions (including spam and viruses) to other computers on the Internet. (Continued) Read Now
-
Definition
DNS attack
A DNS attack is an exploit in which an attacker takes advantage of vulnerabilities in the domain name system (DNS). Read Now
-
Definition
botnet
A botnet is a network of infected smart computing devices controlled by a common type of malware. The term botnet is derived from the words robot and network. A robot, in this context, is a malicious program that operates as an agent for a human attacker. Read Now
-
Definition
IoT botnet (Internet of Things botnet)
An IoT botnet (Internet of Things botnet) is a group of hacked computers, smart appliances and Internet-connected devices that have been co-opted for illicit purposes. Read Now
-
Definition
Network Time Protocol (NTP)
Network Time Protocol (NTP) is a protocol used to synchronize computer clock times in a network. Read Now
-
Definition
DNS amplification attack
A DNS amplification attack is a reflection-based distributed denial of service (DDos) attack. The attacker spoofs look-up requests to DNS servers to hide the source of the exploit and direct the response to the target. Through various techniques, the attacker turns a small DNS query into a much larger payload directed at the target network. Read Now
-
Definition
hacking as a service (HaaS)
Hacking as a service (HaaS) is the commercialization of hacking skills, in which the hacker serves as a contractor. HaaS makes advanced code-breaking skills available to anyone with a web browser and a credit card. Read Now
-
Definition
command-and-control server (C&C server)
A command and control server (C&C server) is a computer that issues directives to digital devices that have been infected with rootkits or other types of malware, such as ransomware. Read Now