Story image

DDoS attack volume triples

30 Mar 2015

The volume of distributed denial of service (DDoS) attacks are becoming more and more frequent, with the average packet volume for attacks increasing 340% to 4.36 million packets per second (Mpps).

According to the Black Lotus Q4 2014 Threat Report, the average bit volume swelled 245% to 12.1 gigabits per second (Gbps) in the final quarter of 2014.

The increases in average attack packet and bit volume signal a change of attack methods deployed by perpetrators, says Black Lotus.

Cybercriminals are favouring more complex attacks, using multiple vectors and blending application layer, SYN and user-datagram protocol (UDP) flood attacks together.

According to Black Lotus, companies are experiencing a continued drop in attack quantity paired with an increase in volume compared to the previous quarter.

Black Lotus estimates enterprises will need security measures capable of handling 15 Gbps minimum in bit volume, up from its Q3 prediction of five Gbps minimum, to protect against the majority of attacks throughout 2015.

The research team anticipates attackers will continue to try new DDoS recipes to confuse security teams, while agitators steal user credentials, customer billing information or confidential files.

The report shows the largest bit volume DDoS attack observed during the period was 41.1 Gbps, due to attackers’ usage of blended, complex attacks to achieve outages.

Black Lotus says organisations should take care to scrutinise other parts of their systems to guard against credential leaks or other data breaches, as cyberattackers will often use DDoS as a distraction for other nefarious activity.

Overall, of the 143,410 attacks observed during Q4 2014, 49% were regarded as severe, and more than half of all attacks mitigated resulted from UDP flood attacks, which cause poor host performance or extreme network congestion via producing high amounts of packets and IP spoofing.

The average attack during the period reported was 12.1 Gbps, a jump in bit volume, and 4.36 Mpps, tripling average packet volume since last quarter.

This indicated a continued reliance on leveraging multi-vector attacks, signaling the need for security practitioners to tap intelligent DDoS mitigation rather than padding networks with extra bandwidth.

Shawn Marck, Black Lotus co-founder and chief security officer, says, “We found DDoS attacks continued trending down in frequency quarter over quarter, but, on average, attack volumes multiplied.

“With networks and IT teams becoming defter at spotting and stopping volumetric attacks, cybercriminals are turning to blended approaches to confuse organisations, often using DDoS attacks as smokescreens for other underhanded activity."

Seagate: Data trends, opportunities, and challenges at the edge
The development of edge technology and the rise of big data have brought many opportunities for data infrastructure companies to the fore.
Popular Android apps track users and violate Google's policies
Google has reportedly taken action against some of the violators.
How blockchain could help stop video piracy in its tracks
An Australian video tech firm has successfully tested a blockchain trial that could end up being a welcome relief for video creators and the fight against video piracy.
IBM X-Force Red & Qualys introduce automated patching
IBM X-Force Red and Qualys are declaring a war on unpatched systems, and they believe automation is the answer.
Micro Focus acquires Interset to improve predictive analytics
Interset utilises user and entity behavioural analytics (UEBA) and machine learning to give security professionals what they need to execute threat detection analysis.
Raising the stakes: McAfee’s predictions for cybersecurity
Security teams and solutions will have to contend with synergistic threats, increasingly backed by artificial intelligence to avoid detection.
Exclusive: Ping Identity on security risk mitigation
“Effective security controls are measured and defined by the direct mitigation of inherent and residual risk.”
CylancePROTECT now available on AWS Marketplace
Customers now have access to CylancePROTECT for AI-driven protection across all Windows, Mac, and Linux (including Amazon Linux) instances.