Story image

Why e-commerce needs DDoS protection for Cyber Monday

23 Nov 2018

Article by Neustar WW Security Sale vice president Dorean Kass

Protecting yourself and your network has never been more important, especially in the lead up to one of the biggest retail events of the year - Black Friday and Cyber Monday - with online consumers in search for the biggest discounts.

In light of this, retailers should be prepared for potential DDoS attacks as fraudsters aim to find vulnerabilities within a network, locate backdoors for exfiltration and use multi-layered techniques as a distraction for other malicious activities.

Suffering from a DDoS attack during this busy sales time could prove to not only be a financial disaster but also severely impact your brand reputation.

DDoS defence and protection techniques are on the rise, not just due to the large attacks that have been recorded, but also because of the fever pitch pace of attacks in recent years.

DDoS attacks can cripple an organisation, a network or even a country and recent attacks have been larger and more complex than ever.

To stay ahead, businesses can adopt a number of DDoS prevention techniques, these include incorporating defensive strategies such as enhanced DNS protection, adoption of web application firewalls (WAF) and scrubbing centres.

Why you need DDoS protection

According to CupoNation, Australians spent over $200 million during Black Friday last year, meaning that it’s essential for those in IT and security roles within e-commerce companies to be familiar with the reasons why an organisation needs DDoS protection, as visibility and preparation are the key tenets for DDoS mitigation.

DDoS attacks are on the increase

According to Kaspersky Labs, the rate of businesses hit by DDoS attacks almost doubled in 2017, from 17% in 2016 to 33%. Furthermore, a 1.35Tbps DDoS attack was recorded earlier this year and was followed by a 1.7Tbps attack. In 2018, the volume and severity of attacks have increased with perpetrators adding botnets, vectors, ports and other malware to amplify the magnitude of their attack.

DDoS attacks are evolving

Innovative criminals are always finding new ways to incorporate new technologies into their attacks, from utilising botnets, Trojan horses and crypto worms to leveraging the innovation of IoT devices. Specifically, during this upcoming busy sales period, criminals will get extra cunning by hitting sites with malicious cyber-connection attacks causing websites to send numerous requests to refresh before crashing altogether.

There’s so much you could lose

A loss of revenue can be quickly followed by a loss in brand trust and the subsequent loss of customers and employees. Furthermore, expensive mitigation techniques to clean up the mess made by a DDoS attack can seriously impact any organisation.

Benefits of implementing DDoS mitigation solutions

For those running an e-commerce enabled website, no matter the size, having a secure and comprehensive DDoS mitigation solution ensures your network, data and everything that is important to your organisation is protected when criminals come calling.

Here are the top four reasons why having a directly connected mitigation service can benefit large organisations: 

Lower latency

Due to a direct connection, data can move faster and more freely across systems, which is highly valuable for companies that specialise in gaming, real-time voice communication and financial services where speed is of the utmost importance.

Higher throughput for large bandwidth users

Large organisations with demanding and advanced networks require a directly connected DDoS mitigation solution that provides comprehensive and powerful DDoS protection. Investing in products that focus on transmitting sensitive data quickly and securely are an ideal solution and prevent network congestion.

Fewer access points for intrusion

Removing any unnecessary entry points from a network drastically reduces the potential vulnerabilities which attackers can exploit to launch a DDoS attack, safeguarding networks against malicious traffic or strategies that seek to impair a network’s ability to define routing policies.

Simple configuration for highly complex systems

Investing in products that are simple and don’t require additional software or hardware to transfer data across networks makes it much easier to integrate into an existing network infrastructure. It also gives organisations an alternative to using legacy GRE tunnels. These kinds of system simplifications have traditionally presented technical challenged because they necessitate an overlay network on top of the physical network.

Chillisoft rounds out portfolio with file integrity vendor
Tripwire is the fourth vendor for Chillisoft in six months, adding critical security controls, vulnerability management and file integrity monitoring.
ESET researchers break down latest arsenal of the infamous Sednit group
At the end of August 2018, the Sednit group launched a spear-phishing email campaign, in which it distributed shortened URLs that delivered first-stage Zebrocy components.
Google 'will do better' after G Suite passwords exposed since 2005
Fourteen years is a long time for sensitive information like usernames and passwords to be sitting ducks, unencrypted and at risk of theft and corruption.
Who's watching you? 
With privacy an increasing concern amongst the public, users should be more aware than ever of what personal data companies hold.
Fake apps on Google Play scamming users out of cryptocurrency
Fake cryptocurrency apps on Google Play have been discovered to be phishing and scamming users out of cryptocurrency, according to a new report from ESET.
Optic Security Group celebrates Axis accolade
Auckland-based business security systems provider Fortlock has picked up an award at Axis Communications’ annual Oceania Axis Partner Summit 2019.
Managing data to comply with privacy regulations - Micro Focus
It’s crucial for organisations to be able to access, understand, and accurately classify the data they have so they know how to treat it.
Hackbusters! Reviewing 90 days of cybersecurity incident response cases
While there are occasionally very advanced new threats, these are massively outnumbered by common-or-garden email fraud, ransomware attacks and well-worn old exploits.