Story image

DDoS attack volume triples

30 Mar 15

The volume of distributed denial of service (DDoS) attacks are becoming more and more frequent, with the average packet volume for attacks increasing 340% to 4.36 million packets per second (Mpps).

According to the Black Lotus Q4 2014 Threat Report, the average bit volume swelled 245% to 12.1 gigabits per second (Gbps) in the final quarter of 2014.

The increases in average attack packet and bit volume signal a change of attack methods deployed by perpetrators, says Black Lotus.

Cybercriminals are favouring more complex attacks, using multiple vectors and blending application layer, SYN and user-datagram protocol (UDP) flood attacks together.

According to Black Lotus, companies are experiencing a continued drop in attack quantity paired with an increase in volume compared to the previous quarter.

Black Lotus estimates enterprises will need security measures capable of handling 15 Gbps minimum in bit volume, up from its Q3 prediction of five Gbps minimum, to protect against the majority of attacks throughout 2015.

The research team anticipates attackers will continue to try new DDoS recipes to confuse security teams, while agitators steal user credentials, customer billing information or confidential files.

The report shows the largest bit volume DDoS attack observed during the period was 41.1 Gbps, due to attackers’ usage of blended, complex attacks to achieve outages.

Black Lotus says organisations should take care to scrutinise other parts of their systems to guard against credential leaks or other data breaches, as cyberattackers will often use DDoS as a distraction for other nefarious activity.

Overall, of the 143,410 attacks observed during Q4 2014, 49% were regarded as severe, and more than half of all attacks mitigated resulted from UDP flood attacks, which cause poor host performance or extreme network congestion via producing high amounts of packets and IP spoofing.

The average attack during the period reported was 12.1 Gbps, a jump in bit volume, and 4.36 Mpps, tripling average packet volume since last quarter.

This indicated a continued reliance on leveraging multi-vector attacks, signaling the need for security practitioners to tap intelligent DDoS mitigation rather than padding networks with extra bandwidth.

Shawn Marck, Black Lotus co-founder and chief security officer, says, “We found DDoS attacks continued trending down in frequency quarter over quarter, but, on average, attack volumes multiplied.

“With networks and IT teams becoming defter at spotting and stopping volumetric attacks, cybercriminals are turning to blended approaches to confuse organisations, often using DDoS attacks as smokescreens for other underhanded activity."

Kiwis losing $24.7mil to scam calls every year
The losses are almost five times higher compared to the same period last year, from reported losses alone.
How to configure your firewall for maximum effectiveness
ManageEngine offers some firewall best practices that can help security admins handle the conundrum of speed vs security.
Exclusive: Why Australian enterprises are prime targets for malware attacks
"Only 14% of Australian organisations are continuously training employees to spot cyber attacks."
Exclusive: Why botnets will swarm IoT devices
“What if these nodes were able to make autonomous decisions with minimal supervision, use their collective intelligence to solve problems?”
"Is this for real?" The reality of fraud against New Zealanders
Is this for real? More often than not these days it can be hard to tell, and it’s okay to be a bit suspicious, especially when it comes to fraud.
Why you should leverage a next-gen firewall platform
Through full lifecycle-based threat detection and prevention, organisations are able to manage the entire threat lifecycle without adding additional solutions.
The quid pro quo in the IoT age
Consumer consciousness around data privacy, security and stewardship has increased tenfold in recent years, forcing businesses to make customer privacy a business imperative.
Kordia launches Women in Tech scholarship at the University of Waikato
The scholarship is established to acknowledge and support up-and-coming female talent and future technology leaders.