The post Number of DDoS Attacks Have Doubled in Six Months As Criminals Leverage Unsecured IoT Devices appeared first on IT Security Guru.

Corero Network Security (LSE: CNS), a leading provider of real-time DDoS defense solutions, announced today the availability of its SmartWall Network Threat Defense – Virtual Edition (vNTD) with full detect and mitigate capabilities.
The SmartWall vNTD is a natural extension of the Corero family of automated DDoS protection solutions, enabling seamless deployment of high-performing, scalable, cost-effective protection across physical and virtual environments; on-premises or in the cloud.
“Corero is meeting the demand for real-time DDoS mitigation with an expansive portfolio of solutions for organizations looking to take control of the DDoS threat, eliminate attacks automatically and protect their network infrastructure to maintain service availability in the face DDoS attacks,” states Sean Newman, Director Product Management, Corero.
SmartWall vNTD, now available for KVM and vSphere platforms, enables the flexibility to choose physical or virtual form-factors when deploying DDoS protection.
 
High Performance, CPU efficient, protection with unified management

• Mitigation deployed, in up to 10Gbps increments, at line-rate speeds
• Protection scales to terabits per deployment
• Industry leading performance per virtual CPU core
• Mixed physical and virtual NTD deployments managed from single a console

SmartWall vNTD provides the scalability, agility and cost flexibility required to deliver DDoS protection for virtualized server infrastructures and SDN/NFV networks, enabling elastically scalable deployments, which can be based on demand for the applications and services being protected.
The expansion of Corero’s SmartWall portfolio with vNTD also enables third-party products, including Firewalls, IPS solutions and other security infrastructure to be enhanced with real-time DDoS mitigation.
“Corero continues to meet customer needs, including technology partners, who are working hard to protect their own customers from the impact of DDoS attacks. Through this process, the requirement for virtualized solutions to support SDN/NFV roll outs and technology partner solutions has been defined. This addition to Corero’s portfolio underscores our leadership in delivering robust, automated DDoS protection to the market,” Sean Newman adds.
For more information please visit https://www.corero.com/products/virtual-network-threat-defense-system.html
OEM partners and organizations committed to protecting their customers from DDoS attacks can reach us at info@corero.com
About Corero Network Security
Corero Network Security is the leader in real-time, high-performance DDoS defense solutions. Service providers, hosting providers and online enterprises rely on Corero’s award winning technology to eliminate the DDoS threat to their environment through automatic attack detection and mitigation, coupled with complete network visibility, analytics and reporting. This industry leading technology provides cost effective, scalable protection capabilities against DDoS attacks in the most complex environments while enabling a more cost effective economic model than previously available. For more information, visit www.corero.com.
 

The post Corero Network Security Expands Product Family to Include Real-Time Virtualized DDoS Protection appeared first on IT Security Guru.

• The ability maintain bandwidth/throughput in the face of a DDoS attack was ranked most important at 42 percent, similarly to last year.
• Unsurprisingly, the ability to handle high-volume, indiscriminate attacks ranked second highest in importance to 29 percent of respondents.
• The ability to mitigate attacks in seconds’ vs minutes or more, and ability to handle attacks that are aimed at disrupting specific applications, 25 percent each.
• The ability to reduce overall CAPEX/OPEX was key for about a fifth of service providers, 22 percent

The capability to integrate DDoS attack mitigation with third-party DDoS detection tools, the ability to provide reporting and visibility into attack types and mitigation that was executed, as well as a solution with low false blocking rates all scored relatively equally as requirements in deploying a DDoS mitigation solution.
With the end user demand for a premium DDoS as a service options, providers which position themselves with automated, sophisticated DDoS protection will not only find themselves rewarded with customer loyalty, but with an edge over their competitors as well.
For more on how ISPs can take advantage of dedicated DDPaaS offerings and how Corero is paving the way for real-time protection and significant services revenue potential, download the full Executive Summary: http://www.fiercetelecom.com/future-ddos-protection-turning-threat-into-a-revenue-generating-opportunity.
 
 

The post Independent Study Reveals 82% of Service Providers see Clear Business Opportunity in Providing Premium DDoS Protection-as-a-Service to Their Customers appeared first on IT Security Guru.

• New extensible architecture, positioned for future scaling and support of virtual, cloud and SDN/NFV deployment models.
• Automatic surgical mitigation of volumetric DDoS attacks, in seconds, not minutes
• Comprehensive traffic visibility and DDoS attack analytics
• Centralized Management and analysis; offered as either physical or virtual appliances

The SmartWall NTD family of solutions is also available as a component of the Corero SmartProtect program, designed to enable Internet service and hosting provider operators to deliver high-value, premium DDoS Protection as-a-Service (DDPaaS) to their customers, with a disruptive pricing model which eases adoption.
SmartWall NTD1100 will be on display at Booth # 2333 during RSA 2017 in San Francisco. SmartWall NTD1100 maintains a pricing scale that is up to four times less than traditional mitigation solutions, with flexible procurement options.  Shipment planned in Q2, 2017.

The post Corero Network Security Expands Real-Time DDoS Mitigation Capabilities to Include 100Gbps Ethernet appeared first on IT Security Guru.

The post 80% of European Businesses Under Threat of DDoS Ransom Attacks Over Next 12 Months, Corero Finds appeared first on IT Security Guru.

The post The Three Little Pigs and the Big Bad Botnet appeared first on IT Security Guru.

The post Customer Trust and Revenues are where DDoS hits hardest appeared first on IT Security Guru.

The post Almost half of Endpoint Systems Compromised in the last 12 months, finds SANS Insititute appeared first on IT Security Guru.

The post DDoS Attack on the San Jose PD Website and IT Assets appeared first on IT Security Guru.

The World Wide Web is only 25 years old, but it has overseen countless advances in the way it is written and manipulated. Look at DDoS attacks – once simple volumetric attacks have now become deceptive and capable of carrying out several functions at once. Yet responses to this threat have not enjoyed the same rapid developments. This article examines what ISPs and carriers can do to mitigate the threat, as well as analysing what approaches are on offer to technical staff fighting the cyber-criminals.
The evolution of DDoS                                                                                                          
In the early days of DDoS attacks (c. 2000), DDoS mitigation technology utilized in the Service Provider indus­try focused on the ability to determine that a DDoS attack was occurring, simply by sampling edge routers and interrogating NetFlow records from those routers. As a result, an operator could see the increase in DDoS traffic but they had few if any defenses at their disposal to block the attacks. Without any true solutions available or in place, a network operator would first interpret that an attack was in progress, then manually inject a null-route – sometimes referred to as a black-hole route – into the routers at the edge of the service provider’s network, and block the attack. This null-route effectively blocked all attack traffic headed toward the intended victim.
However, this approach had negative connotations as well. Null-route injections also blocked all good traffic along with the bad.  The target victim was taken completely offline by the null route and this actually perfected the attack by dropping all packets destined to the victim’s IP addresses. This approach provided a way of at least blunting the flow of the attack and served as a tool to eliminate the collateral damage to other custom­ers or infrastructure as a result of the DDoS attack.
Fast forward several years and we find improvements to DDoS mitigation, and an evolution in protection techniques available to operators. It became clear that a null-route was not an approach that operators preferred to use. Instead of injecting a null-route when an operator observes a large spike, they were now able to inject a new route instead. By implementing a new route, operators could now gain the ability to redirect all traffic through an appliance or bank of appliances that inspected traffic and attempted to remove the DDoS attack traffic from the good user flows. This approach spawned the existence of DDoS scrubbing-centers and DDoS scrubbing-lanes that are commonly deployed today.
This DDoS scrubbing approach, while a significant improvement, still required a considerable amount of human intervention. A DDoS attack would have to be detected (again by analyzing NetFlow records) then an operator would have to determine the victim’s destination IP address(s). Once the victim was identified, a BGP route update would take place to inject a new route to redirect or “swing” the victim’s incoming traffic to a scrubbing lane. The appliances in the scrubbing lane would attempt to remove the DDoS traffic from the good traffic and forward it to the downstream customer.  In order to forward the good traffic back to the original destination, in most cases an operator would also have to create a GRE tunnel from the scrubbing lane back to the customer’s border router.  This approach represents a significant improvement over null-route solutions but it also introduces significant complexity to the carrier network topology and requires dedicated and costly security personnel in order to ensure proper execution.
Recently, the complexity of the DDoS challenge has been evolving and attacks have been increasing in size, sophistication and frequency.  Additionally, as large network operators have succeeded and grown, the sheer size and scale of their infrastructures and their massive customer base presents an incredibly attractive attack surface due to the multiple entry points and significant aggregate bandwidth that acts as a conduit for damaging and disruptive DDoS attacks.  The combination of these trends is now driving the need for an even more sophisticated approach to DDoS mitigation that utilizes purpose-built technology to enable a better economic model for defeating these attacks and creating new revenue streams around clean-pipe services.
As we approach the modern day DDoS threat, with advanced mitigation techniques that have evolved over the last decade, innovative protection, sophisticated visibility and scalable deployment options are emerging.  In-line deployments of mitigation technology at the Internet or transit and peering points offer much needed relief from the frequent and damaging attacks that providers are dealing with on a regular basis.  Alternatively, many providers prefer a scrubbing-lane approach, but require enhanced visibility into the traffic patterns as well as the need to scale the scrubbing operation for increased bandwidth.
DDoS mitigation approaches and real-time threat responses
The weaknesses of old methods – being slow to react, expensive to maintain and unable to keep up with shifting and progressive threats – tell us that solutions appropriate for today need to be always-on and instantly reactive. It’s clear they also need to be adaptable and scalable so that defences can be quickly and affordably updated to respond to the future face of DDoS threats – whatever those may be.
The increasingly popular method of fulfilling these aims is dynamic, in-line DDoS mitigation bandwidth licensing. With this technique, an in-line DDoS mitigation engine is employed but the operator pays for only the bandwidth of attacks actually mitigated. The benefit of this approach is that it delivers full edge protection for locations in the network that are most affected by DDoS, at a fraction of the cost of traditional scrubbing centre solutions.  The desirability of these tools is due to the fact that they can be constantly on, with no need for human intervention, and they provide non-stop threat visibility and network forensics.
Another aspect of effective DDoS mitigation is security event reporting. One of the Achilles heels of traditional DDoS scrubbing centre solutions is that they rely on coarse sampling of flows at the edge of the network to determine an attack is taking place.  DDoS attackers are well aware of the shortcomings of this approach and have modified many of their techniques to ride under the radar, below the detection threshold, in order to evade ever being redirected to a scrubbing centre.  Your security posture will only be as good as your ability visualize the security events in your environment, and a solution that relies on coarse sampling will be unable to even detect, let alone act on, the vast majority of the modern DDoS attack landscape.  A robust modern DDoS solution will provide both instantaneous visibility into DDoS events as well as long-term trend analysis to identify adaptations in the DDoS landscape and deliver corresponding proactive detection and mitigation techniques.
New software and hardware makes real-time responses possible, mainly because the traffic from DDoS attacks generally forms a bell curve. The reason they behave this way is to elude the sample-based anomaly detectors that are supposed to spot and kill DDoS attacks. However the modern data analytics in newer solutions enables DDoS detection far before the system’s critical threshold is reached.
As a result, companies don’t have to accept DDoS as one of those risks that you just can’t avoid – either by paying for it themselves or asking for it from their service providers, they can now acquire the technology that will stop these attacks and prevent the costly downtime that they incur.
 
 
Visit Corero’s website for more information: www.corero.com

The post The Evolution of DDoS appeared first on IT Security Guru.