Despite the huge growth in cloud-based DDoS protection and a perception that on-premises protection is out-of-date and old school, many security researchers believe that on-premises protection against DDoS is still the most effective kind of … [Read more...] about On-Premises DDoS Protection: Is it still necessary?
DDoS mitigation
What is Remotely-Triggered Black Hole (RTBH) Routing?
Remotely-Triggered Black Hole (RTBH) routing is a kind of application of BGP as a security tool within a service provider network. RTBH is frequently deployed in the mitigation of DDoS attacks, particularly when incoming traffic needs to be blocked … [Read more...] about What is Remotely-Triggered Black Hole (RTBH) Routing?
Cloud Protection: DNS Redirect vs. BGP Redirect
During a DDoS attack, the re-direction of traffic in the cloud comes in two varieties: DNS redirect (for application layer protection) and BGP redirect (for network/transport layer protection). Redirecting Traffic via DNS Domain Name Servers (DNS) … [Read more...] about Cloud Protection: DNS Redirect vs. BGP Redirect
What are the Disadvantages to Cloud-based DDoS Scrubbing?
While there are many advantages to cloud-based DDoS scrubbing, which filters malicious traffic from legitimate, there are several disadvantages as well. These include: - Scrubbing centers are only able to monitor inbound traffic - As outbound … [Read more...] about What are the Disadvantages to Cloud-based DDoS Scrubbing?
What is Cloud-based DDoS Scrubbing?
Cloud-based scrubbing employs separate DDoS traffic-cleaning engines to ‘scrub’ clean traffic, filtering bad from good. It is essentially used as an additional layer of protection during a DDoS attack rather than a primary mitigation … [Read more...] about What is Cloud-based DDoS Scrubbing?
Big Data Analysis and DDoS
Big data aims to offer an answer to the outdated nature of detection appliances by offering the ability to baseline based on network-wide data, which increases accuracy of detection. A machine learning approach allows for greater granularity of … [Read more...] about Big Data Analysis and DDoS
Traditional DDoS Mitigation Architecture
There are many types of DDoS protection. The essential traditional architecture for DDoS defense works as follows. Flow data, complementary BGP and SNMP data, all based on incoming traffic flow are sent to a detection appliance inside the network … [Read more...] about Traditional DDoS Mitigation Architecture
DDoS Protection Service: Google’s Cloud Armor
Google launched its own DDoS protection service this week called Cloud Armor. In a blog post, Google Cloud Platform (GCP) rolled it out with several other new services, designed to boost security. These include a dashboard covering various GCP … [Read more...] about DDoS Protection Service: Google’s Cloud Armor
DDoS Protection Service: Neustar
Neustar provides information services and analytics to marketers and other industries drawing on big-data analysis. As part of their portfolio of solutions, Neustar also offers DDoS protection. The company’s SiteProtect NG offers a massive 10TBP of … [Read more...] about DDoS Protection Service: Neustar
DDoS Protection Service: Verisign
Verisign provides Internet infrastructure services and was founded in 1995. Its initial focus was on domain names and operating two of the Internet’s thirteen root nameservers; however, it also offers in-depth cyber security services. This includes … [Read more...] about DDoS Protection Service: Verisign
DDoS Protection Service: Kentik
Kentik offers its DDoS protection in the context of being primarily focused on big data traffic intelligence. The San Francisco-headquartered company formerly known as CloudHelix provides network visibility and performance solutions. Its main … [Read more...] about DDoS Protection Service: Kentik
What is the GDI Foundation?
The GDI Foundation is a nonprofit whose mission is “to defend the free & open Internet by trying to make it safer. We address security issues via Responsible Disclosure”. They are headquartered in The Hague in The Netherlands and was founded by … [Read more...] about What is the GDI Foundation?
DDoS Protection Service: F5 Networks
F5 Networks recently acquired Defense.net, which has led it to alter its services, now offering cloud-based, on-site and hybrid deployment methods. F5 Silverline Protection is well equipped for sophisticated and volumetric DDoS attacks. In terms of … [Read more...] about DDoS Protection Service: F5 Networks
DDoS Protection Service: Cloudflare
Cloudflare offers a variety of security features alongside its CDN services, always including DDoS protection and a range of pricing tiers, including a free option. All four pricing options include unmetered mitigation of DDoS attacks; the business … [Read more...] about DDoS Protection Service: Cloudflare
DDoS Protection Service: DOSarrest
DOSarrest has been in operation for over 11 years of experience, and specializes in DDoS protection in addition to offering CDN and other services. It claims to guarantee is customers “99.99% uptime” and offers a global network capacity of a huge 3 … [Read more...] about DDoS Protection Service: DOSarrest