Get Protected Against the Most Disruptive Cyber Warfare Tool with DDOS Mitigator

Distributed Denial of Service (DDOS) attacks have been evolving over the last 10 years. The impact of these attacks on critical infrastructures have been increasing day by day. Such impact is created by many elements such as the intelligence level of the attackers, strong attack motives and advancement of the attack technologies which is claimed to be backed by the governments.

What to know about DDOS Attacks

A basic denial of service (DOS) attack involves bombarding an IP address with large amounts of traffic. If the IP address points to a Web server, then it may be overwhelmed. Legitimate traffic heading for the Web server will be unable to contact it, and the website becomes unavailable. Service is denied. 

A distributed denial of service (DDOS) attack is a special type of denial of service attack. The principle is the same again, but the malicious traffic is generated from multiple sources – although orchestrated from one central point. The fact that the traffic sources are distributed – often throughout the world – makes a DDOS attack much harder to block than one origination from a single IP address.

How to get protected against DDOS Attacks

The DDOS attack seemed to be an unsolved issue because of its chaotic structure however recent technological developments led cyber security teams to mitigate the risk of online unavailability. “Mitigation” is the right word because one should keep in mind that there can be always a huge attack to make your services unavailable for some time. 

Although many local Internet Service Providers (ISP) provides the DDOS mitigation service whereby DDOS attack identification and mitigation occurs within ISP’s IP backbone before it reaches the customer’s network, now it’s widely accepted that it’s not enough to rely on ISP only. Recently, the commonly accepted concept is the hybrid approach which combines the advantages of network perimeter based solutions – dedicated DDOS Mitigator Appliances – as well as ISP-based solutions. The reason of using DDOS Mitigator Appliances is the insufficiency of ISP solutions about preventing the malicious traffic under 1 Gbps. ISP Scrubbing Centers were designed to mitigate the attacks over 1 Gbps or what we call “volumetric attacks” where the threshold values are used to identify the malicious DDOS traffic, however according to the latest researches, around 40% of the attacks worldwide are named as non-volumetric attacks under 1Gbps. 

Identifying DDOS traffic is the first stage of defence. DDOS Mitigator Appliances are not only using threshold values on inbound-outbound traffic, but also using the advantage of 34+ different data sensors (TCP, UDP, ICMP, HTTP GET, HTTP POST, TCP SYN etc..) for the first phase of decision-making process. The worldwide IP reputation databases identifies the black IP’s and dropping the packets which is the second phase. In this phase, the geographical traffic blocking allows you to block the traffic originated from irrelevant countries/regions which can help much during state-sponsored cyber-attacks. The third and the most important phase is performed by the Anomaly Engine having unique Deep DDOS Inspection technology which is scanning the traffic with heuristic / non-heuristic algorithms, network memory and timely averages, deciding if the traffic is benign or not, in only milliseconds.

After the attack, the evidence file can be printed out from management interface screen on which you can work. The IP addresses, countries of the attackers or the attack type, target service, start-end time can be seen for further investigation.

In order to mitigate the DDOS attack, the IT security tools are not always sufficient; focused Security Emergency Response Teams should be established and kept up-to-date for today’s latest attack scenarios. Moreover, Advanced Persistent Threat (APT) level attacks force victims to get in direct touch with the vendor’s research labs during the attack. The customer and the vendor are advised to get in touch not only during the attacks but also before the attack. The chosen vendor should be transferring the necessary knowledge to the customer by up-to-date documentation and on-site technical trainings. 

Why to get protected against DDOS

DDOS can be disruptive for a wide range of your online services from e-mail and web servers to specific application servers that’s all vital for your mission-critical operations. Whether you’re using an intranet or using secure web-based applications (SSL VPN etc..) you’re likely to suffer a DDOS attack. An online presence (simply an IP address) is enough to experience it. 

A successful DDOS attack can not only result in time loss or money loss but also image loss linked to your online presence. It can be harmful as a psychological attack tool during a “Cold War” or can be used to distract Cyber Security Teams during another serious cyber-attack for intelligence gathering such as malware or a virus activity that should be investigated manually. When you’re under an attack, all eyes are on the attack, and there may not be as many resources paying attention to other parts of your network. 

Summary

A real cyber war includes two-stage mission. The first stage is intelligence gathering from different resources from the enemies’ systems by using virus, malware, backdoors etc. When you’re done successfully with this stage, second stage comes out to be easier and much disruptive which is cutting off systems’ online availability. An advanced persistent level DDOS attack is a useful, cheap and easy-to-perform tool to execute this command. 

Originated from ODTÜ Teknokent - Turkey’s powerful R&D hub - , Labris Networks Inc.’s DDOS Mitigator Appliance is designed to be an intelligent shield against disruptive DDOS attacks. By its best-of-breed anomaly engine, unpredictable DDOS traffics can be detected on real-time for ultimate protection.

About Labris Networks Inc.

Since 2002, Labris Networks Inc. has been an R&D focused and rapidly-growing provider of network security solutions through its globally-proven products. Labris ensures ultimate network security through its extensive product line including Firewall/VPN, Web Security, E-Mail Security, Lawful Interception and DDOS Mitigation solutions on LBRUTM, LBRLOG, LBRMNG and DDoS Mitigator appliances. Next-generation solutions are developed to detect, identify all kinds of real-time threats, applications providing a smart shield against intrusions, viruses, spam, malware and DDOS attacks.

Being one of the Common Criteria EAL4+ certified security gateway brands in the world and rapidly growing global player, Labris provides its customers the top-level security with optimum cost. Labris, headquartered in ODTÜ Teknokent, Ankara, has partners and offices serving Europe, Middle East, North Africa, Caucasus and Southeast Asia.

 

www.labrisnetworks.com