| Arbor Networks’ Sixth Annual Worldwide Infrastructure Security Report |
|
Reveals DDoS Attack Size Breaks 100 Gbps for First Time; Up 1000% Since 2005 Application-layer DDoS attacks target data center infrastructure Mobile operators have limited visibility and control over their networks DNS and IPv6 continue to present significant challenges for network operators Chelmsford, Mass., February 1, 2011 – 2010 should be viewed as the year distributed denial of service (DDoS) attacks became mainstream as many high profile attacks were launched against popular Internet services and other well known targets. The year also witnessed a sharp escalation in the scale and frequency of DDoS attack activity on the Internet. The 100 Gbps attack barrier was reached for the first time while application layer attacks hit an all-time high. Service providers experienced a marked impact on operational expense, revenue loss and customer churn as a result, according to a report issued today by Arbor Networks, a leading provider of security and network management solutions for converged carrier networks and next-generation data centers. Arbor’s longstanding relationships and reputation as a trusted advisor and solution partner to service providers and network operators across the globe make this annual report possible. The report offers a rare view into the challenges of network operators on the front lines of a global battle against botnets and DDoS attacks. It is designed to provide data and insight that will enable network operators to make more informed decisions about their security strategies to ensure availability for mission-critical Internet and other IP-based infrastructure. “Arbor Networks’ research is utterly indispensible for anyone who wants to understand the network security landscape, how it is evolving and what the implications may be,” said Ethan Zuckerman of Harvard University’s Berkman Center for Internet & Society. DDoS attacks have gone mainstream Attack surface continues to expand “Network operators are facing a global Internet insurgency driven by the ubiquity of botnets. This has led to rapidly escalating DDoS attack size, frequency and sophistication,” said Roland Dobbins, solutions architect with Arbor Networks. “Adding to the challenges facing operators is the increasing number of attack vectors, including applications and services, not to mention the proliferation of mobile devices.” Application-layer DDoS attacks are increasing in sophistication and operational impact An alarming 77% of respondents detected application layer attacks in 2010. These attacks are targeting both their customers and their own ancillary supporting services, such as domain name system (DNS), Web portals, etc. Internet data center (IDC) operators and mobile/fixed wireless operators report that application-layer DDoS attacks are leading to significant outages, increased operational expenditures (OPEX), customer churn and revenue loss. Increasingly sophisticated attacks expose IPS and firewall shortcomings Lack of preparedness on mobile networks presents new attack opportunities Operators are struggling to keep up their security posture through transition to IPv6 Operators expressed concern over lack of visibility into IPv6 network traffic and their inability to control that traffic to the same degree they control IPv4 traffic. The additional network state and DDoS vector introduced by deployment of 6-to-4 gateways and network address translators (NATs) is also a significant threat to availability. DNS emerging as a top target About Arbor Networks For technical insight into the latest security threats and Internet traffic trends, please visit our website at arbornetworks.com and our blog at asert.arbor.net . Note to Editors: Arbor Networks, Peakflow, ATLAS and the Arbor Networks logo are trademarks of Arbor Networks, Inc. All other brand names may be trademarks of their respective owners. Contacts: U.S. Europe |