Prolexic Quarterly Global DDos Report Q2 2013

1
Prolexic Quarterly Global DDoS Attack Report Q2
2013

• www.prolexic.com

2
Prolexic Global DDoS Attack Report Q2 2013

• What happened in Q2 2013?
• Average bandwidth reached 49.24 Gigabits per
  second (Gbps)
• Packet-per-second (pps) rate averaged 47.4
  million
• Average attack duration increase to 38 hours
• DDoS attacks got bigger, stronger and longer

www.prolexic.com
3
Bigger DDoS attacks

• 17 percent of attacks exceeded 60 Gbps in Q2

4
Emerging DDoS trends

• Identified trends
• Targeting of Internet service providers (ISPs)
  and carrier-router infrastructures
• High average packets-per-second (pps)
• Average pps exceeds the capacity of most DDoS
  mitigation equipment
• Even routers carrying traffic to DDoS mitigation
  equipment would be strained at this level
• See full report for details on pps trends

5
Analysis of DDoS attack types in Q2 2013

• 74.7 percent of attacks targeted infrastructure
• Favored attack types were
• SYN 33 percent (infrastructure)
• ICMP 15 percent (infrastructure)
• UDP 10 percent (infrastructure)
• HTTP GET 21 percent (application)
• Download the full report for percentages and
  graphs by attack type, including attack volume
  and trends

6
DDoS attack frequency in Q2 2013

• Prolexic mitigated more DDoS attacks than ever in
  Q2 2013
• April was the busiest month 39.7 percent of all
  attacks
• April 8-14 and April 15-21 were the most active
  weeks

7
DDoS attack frequency in Q2 2013 vs. Q2 2012

• The chart shows the percent change in the number
  of attacks by week from Q2 2012 to Q2 2013

8
Top 10 source countries DDoS attacks in Q2 2013
9
Case study 167 Gbps DrDoS attack

• The largest attack that Prolexic has mitigated
• Leveraged misconfigured DNS servers for
  distributed reflection denial of service (DrDoS)
  attack
• Used amplification tactics to increase strength
• Attackers probably used a DDoS-as-a-service
  stresser or booter suite with root/system-level
  access
• Get the Q2 2013 DDoS Attack Report for specific
  attack vectors and traffic distribution used in
  this attack

10
Prolexic Global DDoS Attack Report Q2 2013

• Download the Prolexic Q2 2013 Global DDoS Attack
  Report for
• Average and trends in attack duration and
  bandwidth
• Total number and trends of attacks by type
• In-depth case studies
• Year-over-year and quarter-over-quarter
  comparisons
• A look forward at emerging DDoS trends
• Prolexic Technologies is the worlds largest and
  most trusted distributor of DDoS protection and
  mitigation services.
• Prolexic Security and Engineering Response Team
  (PLXsert) monitors the global malicious cyber
  threats and actively analyzes DDoS attacks using
  proprietary techniques and equipment.