DDoS Attack Defences

DDoS attack defences are especially important given that attackers can now switch vectors more quickly than any person or traditional DDoS defence system can respond, thanks to automated attacks.

Ensure your business is protected from these attacks by keeping Corero’s tips in mind:

DO

1. Keep a record of your DDoS resilience plans

Including your technical competencies, a plan on how to sustain business operations in the face of a successful DDoS attack, and method of communications in the case of an incident.

2. Understand your network traffic patterns

And look for DDoS attack protection solutions that identify DDoS traffic in real-time and immediately remove large and small attacks.

3. Contact a provider of mitigation

DDoS protection plans are now widely available from ISPs and hosting companies, either as a premium subscription service or as part of an integrated value-add service. But make sure to get in touch with your ISP in advance of being attacked; otherwise, if you are currently facing a DDoS attack and do not yet have DDoS protection in place, your ISP might not be able to sign you up and stop the DDoS traffic to your site right once. You could also invest in an on-premises or DDoS defence solution.

4. Combine successful attack protection

with time-to-mitigation and don’t forget that DDoS mitigation services might be a helpful complement to an automated DDoS mitigation system.

DON’T

1. Don’t assume that only large-scale attacks are the issue

Smaller attacks, although typically brief, make it easier to miss due to their size.

2. Avoid depending on traffic monitoring

Monitoring your traffic and establishing threshold limits is not a sufficient form of defence, especially when you consider that minor, sub-saturating attacks frequently go undetected by threshold triggers.

3. Don’t rely on an IPS or Firewall

Neither an IPS nor a firewall will be able to prevent attacks from happening. Even firewalls that advertise having built-in anti-DDoS capabilities have very limited powers to block assaults, frequently using indiscriminate thresholds. Every application and user utilising that port is blocked when the threshold limit is met, resulting in an outage.

So, how can you prevent a DDoS attack from taking down your network? You can employ a number of strategies to stop a DDoS attack including:

• Black-holing or sink holing
• Routers and firewalls
• Intrusion-detection systems
• Servers
• DDoS mitigation appliances
• Over-provisioning

To find out more on these strategies, follow through to the article here – https://www.computerworld.com/article/2564424/how-to-defend-against-ddos-attacks.html

Source: https://www.corero.com/7-tips-for-defending-your-network-against-ddos-attacks/