Newsletters
Technology, Discovery & Innovation NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
This ad will display for the next 20 seconds. Click for more information, or
Home Computing Digital Life Discovery Space More Topics...
Eliminate costly downtime!
Find out how with Free White Paper
& enter to win a Samsung Galaxy Note

www.apc.com
Data Security
Average Rating:
Rate this article:  
DDoS Attacks and Tools Increase Dramatically
DDoS Attacks and Tools Increase Dramatically

By Barry Levine
February 8, 2012 11:41AM

Bookmark and Share
The new DDoS tools and motivation, Arbor Networks said, "represents a sea change in the threat landscape." Arbor Networks Solutions Architect Roland Dobbins noted in a statement that 2011 represented "a democratization of DDoS," adding that any type and size of organization can become a target, and anyone can carry out such a DDoS attack.
 



Distributed Denial-of-Service attacks, or DDoS, are increasing in number, have become more effective in a shorter length of time, and frequently have political rather than monetary motivations. Those are some of the takeaways from several recent reports on the practice.

Security company Prolexic is reporting that, during last year's fourth quarter, there were 45 percent more DDoS attacks than the same time in the previous year, and more than double the number in the previous quarter. The company said that, while attacks are lasting a shorter period of time, they generally have a greater packet-per-second volume.

"Machine Gun with Laser"

Prolexic also said that the average attack bandwidth in the last quarter was 148 percent higher than the third quarter, and 136 percent more than a year ago.

Attacks are likely to be shorter, said Prolexic CTO Paul Sop in a statement, but with much more impact in terms of packet-per-second volume. "In the past," he said, "attackers had a rifle," while now "they have a machine gun with a laser." Prolexic also reported an increase in application-layer attacks against e-commerce companies.

Chelmsford, Massachusetts-based network security provider Arbor Networks' annual Worldwide Infrastructure Report, released Tuesday, found that ideologically motivated "hacktivism" is the most frequent motivator for DDoS incidents. This replaces financial reasons, which had included competitive motives or extortion. Sometimes, the company said, DDoS attacks are used for distraction after financial theft has been conducted through the use of a Trojan.

The company also noted that there are a number of attack tools which have been developed in the last few years, making an attack something that people of various technical skills can readily launch. The tools include single user flooding tools, small host booters, shell booters, Remote Access Trojans with flooding capabilities, simple and complex DDoS bots, and even some commercial DDoS services.

"A Sea Change"

Arbor Networks noted that the threat is "obviously more severe from professionally coded bots," with smaller threats from small projects conducted by amateurs. But even the smaller attacks, it noted, can have Remote Access Trojan functionality that allows such actions as password theft, downloading and enabling malware, or keystroke detection.

The new tools and motivation, Arbor Networks said, "represents a sea change in the threat landscape." Arbor Networks Solutions Architect Roland Dobbins noted in a statement that 2011 represented "a democratization of DDoS," adding that any type and size of organization can become a target, and anyone can carry out such an attack.

As for defensive measures, Prolexic suggested companies leverage better traffic monitoring and analysis tools, to provide greater alert accuracy and faster identification and analysis. "The faster attacks can be recognized," the company said, "the faster they can be mitigated."

Another security company, New Jersey-based Radware, also issued a report that noted small, less-intensive attacks can cause more damage than larger DDoS incidents. It said that firewalls and intrusion prevention systems are not sufficient to thwart attacks, and that the core mitigation strategy should be to "defend and absorb."

This includes quickly identifying the attack tool being used and exploiting its weaknesses, and making sure the service provider can "mitigate volumetric attacks that may saturate your bandwidth."

Charles King, an analyst with Pund-IT, said he's seen "a heightened awareness" among IT departments about such threats as DDoS, but added that there hasn't been "a great deal of evidence that companies are devoting more funds" to this issue.
 

Tell Us What You Think
Comment:

Name:



Salesforce.com is the market and technology leader in Software-as-a-Service. Its award-winning CRM solution helps 82,400 customers worldwide manage and share business information over the Internet. Experience CRM success. Click here for a FREE 30-day trial.


 Data Security
1.   Tor Working To Fix Security Exploit
2.   Protect Yourself from Identity Theft
3.   Hackers Breached StubHub Accounts
4.   Juniper DDoS for High-IQ Networks
5.   Google Hacker Team to Hunt Bugs


advertisement
Protect Yourself from Identity Theft
Even if your data was compromised.
Average Rating:
Tor Working To Fix Security Exploit
Bug reportedly reveals ID of users
Average Rating:
Gartner Rates IT Security Companies
IBM, HP, McAfee, Splunk ranked well.
Average Rating:


advertisement
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
Canadian Government Charges China With Cyberattack
The government of Canada is not happy with China. Canadian officials have accused "a highly sophisticated Chinese state-sponsored actor" of launching a cyberattack on its National Research Council.
 
Researchers Working To Fix Tor Security Exploit
Developers for the Tor privacy browser are scrambling to fix a bug revealed Monday that researchers say could allow hackers, or government surveillance agencies, to track users online.
 
Wall Street Journal Hacked Again
Hacked again. That’s the story at the Wall Street Journal this week as the newspaper reports that the computer systems housing some of its news graphics were breached. Customers not affected -- yet.
 

Enterprise Hardware Spotlight
Apple Updates MacBook Pros, Cuts Prices Up to $100
The popular MacBook Pro laptop line just got an update and a price cut of as much as $100. The MacBook Pro with Retina display now includes faster processors and double the memory.
 
Dell, BlackBerry Not Sweating Apple-IBM Alliance
IBM's recent move to partner with Apple to sell iPhones and iPads loaded with corporate applications has excited investors in both companies, but two rivals say they are unperturbed for now.
 
Watson Gets His First Customer Service Gig
Since appearing on Jeopardy, IBM's Watson supercomputer has been making a living using his super-intelligent knowledge base for business verticals. Now, Watson's been hired for his first customer service job.
 

Mobile Technology Spotlight
Android 'Fake ID' Puts Millions of Users at Risk
Having this fake ID is nothing to brag about, even if you are a minor. The “Fake ID” Android flaw drops malware into smartphone apps. It can steal credit card data and even take over your device.
 
FTC Wants Fix for 'Perfect Scam' of Mobile Cramming
The U.S. Federal Trade Commission has issued new guidelines to curb “mobile cramming,” a troublesome practice that adds unauthorized third-party charges to mobile phone bills.
 
Facebook: You Will Use Messenger, and You Will Like It
Starting this week, Facebook users with Android and iOS phones will be forced to use the separate Messenger app to send Facebook messages. Pending messages will still be visible in the main app.
 

Navigation
Sci-Tech Today
Home/Top News | Computing | Digital Life | Discovery | Space | Innovation | Health | Science News
Environment
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.