Endpoint

4/15/2016
10:00 AM
Steve Zurier
Steve Zurier
Slideshows
Connect Directly
Twitter
RSS
E-Mail
50%
50%

How To Prepare For A DDoS Attack: 10 Steps

Like a hurricane or a flood, a DDoS is a crisis. Follow these 10 steps to prepare for an attack before it hits.
Previous
1 of 11
Next

Image Credit: Can Stock Photo

Image Credit: Can Stock Photo

Distributed denial of service (DDoS) attacks are scary. In a matter of minutes, they can shut down a network, service or website, costing companies millions of dollars.

A recent study by Corero Network Security found that while 34 percent of IT managers surveyed cited lost revenues as the most damaging consequence of a DDoS. Nearly half -- or 45 percent -- say loss of customer trust and confidence is their greatest concern.

When they first came on the scene 20 years ago, a DDoS -- which is when a large network of botnets overwhelm another system’s connection causing it to deny service to legitimate traffic – even threatened to take down the Internet itself.

That’s ancient history. Over time, vendors and service providers have developed products that help IT staffs better cope with the threat of a DDoS. But they come in waves and over the past year there has been an uptick in DDoS attacks.

“There have always been various waves of DDoS attacks, and we saw one toward the end of 2015,” says Barry Greene, CTO of Palo Alto-based GetIT, or Green Energy Technology & Infocommunications Technology.

Greene says that although we are currently experiencing a bit of a lull, now’s a good time to prepare for the next wave. He recently authored a white paper on preparing for a DDoS and spent some time talking with Dark Reading about strategies for defending against DDoS attacks. 

“Think of a DDoS as a crisis much like a hurricane or a flood,” Greene says. “You wouldn’t want to start preparing for a hurricane on the day of the event. The same holds true for a DDoS.”

 

Steve Zurier has more than 30 years of journalism and publishing experience, most of the last 24 of which were spent covering networking and security technology. Steve is based in Columbia, Md. View Full Bio

Previous
1 of 11
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
MatsS846
100%
0%
MatsS846,
User Rank: Apprentice
4/15/2016 | 4:25:33 PM
11FU
11 pageloads to read one text?

ELEVEN pages?


Yeah...keep it!
LordC623
100%
0%
LordC623,
User Rank: Strategist
4/15/2016 | 10:48:23 AM
No thanks
Oh, interesting story let's check this out.

 

*sees 11 image slide show*

 

*closes browser tab*
High Stress Levels Impacting CISOs Physically, Mentally
Jai Vijayan, Freelance writer,  2/14/2019
Valentine's Emails Laced with Gandcrab Ransomware
Kelly Sheridan, Staff Editor, Dark Reading,  2/14/2019
Making the Case for a Cybersecurity Moon Shot
Adam Shostack, Consultant, Entrepreneur, Technologist, Game Designer,  2/19/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
How Enterprises Are Attacking the Cybersecurity Problem
How Enterprises Are Attacking the Cybersecurity Problem
Data breach fears and the need to comply with regulations such as GDPR are two major drivers increased spending on security products and technologies. But other factors are contributing to the trend as well. Find out more about how enterprises are attacking the cybersecurity problem by reading our report today.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-1659
PUBLISHED: 2019-02-21
A vulnerability in the Identity Services Engine (ISE) integration feature of Cisco Prime Infrastructure (PI) could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against the Secure Sockets Layer (SSL) tunnel established between ISE and PI. The vulnerability is due to...
CVE-2019-8983
PUBLISHED: 2019-02-21
MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2).
CVE-2019-8984
PUBLISHED: 2019-02-21
MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2).
CVE-2018-20122
PUBLISHED: 2019-02-21
The web interface on FASTGate Fastweb devices with firmware through 0.00.47_FW_200_Askey 2017-05-17 (software through 1.0.1b) exposed a CGI binary that is vulnerable to a command injection vulnerability that can be exploited to achieve remote code execution with root privileges. No authentication is...
CVE-2018-6687
PUBLISHED: 2019-02-21
Loop with Unreachable Exit Condition ('Infinite Loop') in McAfee GetSusp (GetSusp) 3.0.0.461 and earlier allows attackers to DoS a manual GetSusp scan via while scanning a specifically crafted file . GetSusp is a free standalone McAfee tool that runs on several versions of Microsoft Windows.