DDoS attacks continue to grow as 25 from 2015 first-trimester attacks worldwide were larger than 100 Gbps, according to the latest DDoS mitigation data from Arbor Networks.
In the majority of recent attacks, a reflection technique was used to boost them using the Network Time Protocol (NTP), Simple Service Discovery Protocol (SSDP), and DNS servers.
SSDP Attacks with enhanced reflection have become fashionable. The 1 2015 quarter of 126.000 had 83.000 such attacks, from 4 that became the 1 quarter of last year and only three 2014 quarter of 138. The biggest attack was XNUMXGbps
Enhanced Reflection is a technique that allows an attacker to magnify the amount of traffic it can produce while hiding the source of the attack.
The tactic is based on the insufficient protection of devices that are connected to the Internet and provide services UDP. THE Mission μιας ψευδής αίτησης με πλαστογραφημένη address to the target it generates a response, much larger in size than the original request. These requests are directed at the main target which is drowned out by legitimate requests.
The technique is possible because many service providers still do not apply filters to their network that can block traffic from "fake" IP addresses.
The largest size record already has break in 2015 an attack in India reached 334Gbps, surpassing the previous record of 325Gbps. The US is home to the most targets of such attacks, more than any other single country.
Attacks in general are becoming shorter in time, but their intensity is enormous. The majority of attacks (approximately 90%) last less than an hour.
"The attacks DDoS "Accelerating to over 200Gbps can be extremely dangerous for network operators and can cause collateral loss on all services, such as cloud hosting and business networks," said Darren Anstee, a technician at Arbor Networks.
Arbor Networks statistics are from service of ATLAS, which controls about a third of all Internet traffic from 330 customers, mostly phone companies and ISPs.
