Welcome!

Open Web Authors: Elizabeth White, Maureen O'Gara, Keith Mayer, RealWire News Distribution, Paul Miller

Related Topics: Security, XML, Web 2.0, Open Web

Security: Article

What Are DDoS Attacks and How Can You Prevent Them?

Protecting your business.

Internet Security is a vital measure for any business to implement. Due to the Internet's global reach, it is becoming increasingly more important to protect sensitive company data and networks. For multinational corporations and smaller businesses alike, the possibility of attack on a system or network is a daily concern.

Over the past few years Distribution Denial of Service (DDoS) attacks have become more frequent, diversified and on a larger scale. Unlike access attacks that enter security perimeters to gain information, DDoS attacks paralyze Internet systems by flooding it with useless traffic. Websites can be seized and crashed by hackers, which cause severe implications and damage to a business's reputation.

These DDoS attacks are an unfortunate inevitability of online business and are a huge threat to organizations. Even high profile companies are having to reconsider their security protocols following vicious attacks. As technology becomes more sophisticated and widespread, so do DDoS attacks, making the preventative measures so critical. Most typically, DDoS attacks are intended to cause widespread damage, especially those carried out by activists and international cybercriminals.

The main issue with Internet security lies in the fact that while Firewalls and Intrusion Prevention Systems (IPS) are essential security tools, they are still vulnerable and open to complex attacks. They are unable to deal with the DDoS problem, as they are built to protect against known, as opposed to emerging threats. Hackers are finding increasingly complex and inventive ways to gain access to servers and are continuing to create new viruses.

Firewalls offer security against single user attacks by denying access to unsolicited connections that attempt to enter the system, but as most attacks are coming from several computers, the firewall has no way of detecting and dealing with huge increases in traffic. It is the lack of anti-spoofing with a traditional firewall (whereby an IP address is spoofed to make it appear as if it is coming from a reputable source) that is considered a loophole.

For many businesses these traditional measures provide sufficient protection for their sensitive data and networks. IPS devices manage network traffic and blocks unwanted network activity, but can't scan for multiple forms of incoming traffic. What is required for the highest level of protection is an additional purpose built device or service that can assess and filter inbound traffic to a website.

Specific tools such as DDoS Defense systems have high-end technology that detects the DDoS attack and diverts it to be analyzed and filtered, ascertaining whether it is safe to process. The device mitigates incoming traffic for potential threats before any network traffic can gain access to the firewall, acting as a pre-precautionary measure. DDoS Defense systems also enable businesses to maintain continuity during potential attacks, reducing downtime for websites.

The market for DDoS Defense systems is starting to develop as hackers become more resourceful. And as the attacks become more widely publicized, businesses are taking greater precaution with Internet security and combining essential security tools with more specialized preventative measures.

Hyve's DDoS Defense System offers total protection by inspecting high levels of network traffic and mitigating DDoS attacks. Hyve's SecureCloud also has IPS and DDoS defense as part of the Cloud infrastructure.

More Stories By Steve Jordan

Steve Jordan is the Business Development Manager for hyve.com. He is involved in all the following technical services: VMware Cloud Hosting, SFTP Hosting, Load Balanced Complex configurations including mySQL and SQL Server replication. I have also worked as a developer (some years ago) in Java and .NET.