1. Proportion of monitored
attacks over 10Gb/sec up
470% from 2009 -> 2010.
Proportion of monitored
attacks over 10Gb/sec has
dropped by 43% so far in
2011, compared to 2010.
DDOS Stats : 2011
Proportion of attacks over 10Mpps on the rise!
Proportion of monitored attacks
over 10Mpps has increased by 119%
in 2011, compared to 2010.
Approx 78% less than 1 hour
1
2. Large Attacks are Now Commonplace
• Aggregate attack sizes have leveled off but remain at levels capable of overwhelming
most Internet operators
• 13% of respondents report attacks above 10 Gbps
• 40% of respondents report attacks above 1 Gbps
• Largest pps attack reported is 35 Mpps keeping pace with 2010
3. DDoS Threats are Top of Mind
• 4 of the top 6 threats seen over the last 12
months are DDoS related
• The top 4 perceived threats for the next 12
months are DDoS related
• DDoS threat awareness is high
4. You’re Customers Knows the Impact…
Source: Ponemon Institute – 2010 State of Web Application Security
Botnets & DDoS attacks
cost an average
enterprise $6.3M* for a
24-hour outage
* Source: McAfee – Into the Crossfire – January 2010
4
5. Regional Network
ATTACKER
Regional Network
VICTIM
192.1.1.2
DDoS
BGP announcement
2
Clean Center
Protected
Network Zone
Inject Clean Traffic
4
3 Redirect
3 Redirect
Detect DDoS using Flow analysis
1
DDOS protection service
A Distributed denial-of-service attack (DDoS attack) is an attempt to make a
computer or network resource unavailable to its intended users
DDOS protection service consists of :
Detection
Mitigation – on demand or always on
6. DDoS Protection Services : Service Types
Features Bronze Silver Gold Platinum
In-cloud attack detection
Active communication
between CPE & Cloud (Cloud
Signaling) for cloud mitigation
In-cloud attack detection,
mitigation and reporting
Managed CPE based attack
detection, mitigation &
reporting.
Price
6
7. RCOM DDoS Protection
Cloud Signaling mitigation service to integrate with customer
appliances
DATA CENTER
IPS Load
Balancer
CLOUD MSSP
LOCAL MSSP
OTHER ISPs
Peakflow
OR
$
Drive incremental sales of in-cloud DDoS
protection by marketing Cloud Signaling
capabilities
7