Arbor Networks, a leading provider of DDoS and advanced threat protection solutions for enterprise and service provider networks, today released data on global distributed denial of service (DDoS) attack trends for the first three quarters of 2013. The data shows that DDoS continues to be a global threat, with alarming increases in attack size this year.
“Arbor Networks’ ATLAS system gives tremendous visibility into Internet traffic patterns and threat evolution. As more service provider customers participate, we gain even more visibility into what is going on out there. Much like the growth in DDoS attacks themselves, we’ve seen tremendous growth in ATLAS. In Q2, ATLAS monitored 47Tb/sec of peak IPv4 traffic. In Q3, that number rose 46% to 69Tb/sec. This is a significant portion of all Internet traffic, and provides Arbor researchers, customers with a truly unique view of the global attack landscape,” said Darren Anstee, Solutions Architect for Arbor Networks.
KEY FINDINGS: DDoS attack size accelerating rapidly
- § 54% of attacks so far this year are over 1Gb/sec, up from 33% in 2012
- § 37% of attacks so far this year are in the 2 – 10 Gb/sec range, up from 15% last year
- § 44% growth in proportion of attacks over 10Gb/sec, to 4% of all attacks
- § More than 350% growth in the number of attacks monitored at over 20Gb/sec so far this year, as compared to the whole of 2012
- § For 2013 an average DDoS attack now stands at 2.64Gb/sec, up 78% from 2012
- § 87% of all attacks monitored so far this year last less than one hour
- § Largest monitored and verified attack size increases significantly to 191Gb/sec
The ATLAS Active Threat Level Analysis System is a truly innovative, one-of-a-kind Internet monitoring system. ATLAS is a collaborative effort with 275+ service providers who have agreed to share anonymous traffic and attack data on an hourly basis with Arbor’s Security Engineering & Response Team – ASERT.
This data is collated along with information gathered by Arbor’s global honeypot network, data from malware / attack tool research, and information from third-party security organizations. The ASERT analyze all of this information and provide threat intelligence information back to the broader security community, and intelligence feeds which can be used within Arbor products to help protect our customers from the latest threats.
The network and security intelligence delivered via ATLAS gives Arbor customers a considerable competitive advantage because of the powerful combination of the micro view of their own network (via Arbor products) together with the macro view of global Internet traffic (via ATLAS).
With this unique vantage point, Arbor is ideally positioned to deliver intelligence about DDoS, malware, exploits, phishing and botnets that threaten Internet infrastructure and services.
