Best Practices for DDoS Mitigation Service Testing and Validation

1. CONFIDENTIALwww.prolexic.com
Planning for and Validating a DDoS Defense Strategy
www.prolexic.com

2. www.prolexic.com
Planning for and Validating a DDoS Defense
Strategy
• DDoS attacks can cost businesses:
• Sales
• Customer loyalty
• Search engine rankings
• An attack on an unprepared business can result
in several days of downtime
• Having a solid DDoS response plan as part of
your company’s business continuity plan is
essential
2
May 2013 www.prolexic.com

3. www.prolexic.com
Best Practices for DDoS Mitigation Validation
With the DDoS mitigation service active
• Verify that all applications are performing properly
• Verify all routing and DNS is working
• Generate a few gigabits of controlled traffic to
validate features of the service, including:
• Alerting
• Activation
• Mitigation
3

4. www.prolexic.com
Best Practices for DDoS Mitigation Validation
• Validate your on-premise monitoring systems
• Test small levels of traffic without scrubbing and
without any DDoS protection
• Identify stress points on your network
• Conduct baseline testing and calibrate systems to
remediate vulnerabilities
• Schedule validation tests on a regular basis
(yearly or quarterly)
• If network issues arise during testing, make
modifications
4

5. www.prolexic.com
Best Practices for DDoS Mitigation Validation
• Based on the test results, develop a mitigation
playbook as part of an incident response plan
• This plan ensures that everyone in the
organization knows what to do and expect when
a DDoS attack hits
Download the full report from Prolexic for more information
about best practices to ensure your DDoS mitigation service can
protect your business.
5

6. www.prolexic.com
Estimating the Cost of a DDoS Attack
• Forrester Consulting has
found that an online
company loses an
average of US $220,000
per hour during an
unmitigated DDoS
attack
6

7. www.prolexic.com
Be Prepared: Test and Validate
• Every company that does business online is vulnerable to
DDoS attacks
• Talk to your DDoS mitigation provider before an attack
happens
• Test and validate your DDoS mitigation service regularly.
Download the full report for more information about how to test
and validate a DDoS defense plan.
7

8. www.prolexic.com
Create an Operations Plan for DDoS Attacks
• In addition to testing and validating your DDoS
mitigation service, develop a strong
operational plan for activation and
communication in the event of a DDoS attack
8

9. www.prolexic.com
Download the Free White Paper
• Download the white paper Planning for and Validating a
DDoS Defense at http://www.prolexic.com/planning
• The white paper includes:
• Detailed enterprise case studies that show the
consequences of inadequate preparation
• What to include in your anti-DDoS playbook
• A best-practice case study of DDoS attack readiness
• How to validate your DDoS defense
9

10. www.prolexic.com
About Prolexic
• Prolexic Technologies is the world’s largest
and most trusted provider of DDoS protection
and mitigation services
• Prolexic has successfully stopped DDoS
attacks for more than a decade
• We stop the largest attacks that exceed the
capabilities of other DDoS mitigation service
providers
10