DDoS attacks become smarter and decrease in size
When it comes to DDoS attacks there is a lot of talk about large and complex attacks. But in the past year the DDoS attacks have actually become smaller. That is what NBIP observes in the DDoS data report 2017. This report ( download here ) not only shows that these attacks are becoming less large but also much more efficient and smarter.
DDoS attacks are relatively easy to implement and buy and the methods to perform an attack have become more ingenious in 2017. “The executor of a DDoS attack is no longer based on ‘brute force’, but is becoming more and more subtle,” says Octavia de Weerdt, general manager of NBIP.
The NBIP saw the number of DDoS attacks increase in 2017, but the size (in Gbps) decreases. Also, the attacks lasted significantly less compared to the previous year, which according to the NBIP is because attackers are increasingly focused.
De Weerdt: “ An attack just above the capacity of the target server is, in fact, more efficient than a very large DDoS attack. Also, several smaller attacks are more difficult to counter than a major attack. “
The NBIP also investigated the different types of DDoS attacks in 2017. An important trend is the emergence of multi-tractor attacks, in which several types of DDoS attacks are combined. Nearly a quarter of the attacks in 2017 involved such an attack, where hardly any such attacks were detected in 2016.
Expectations for 2018
The NBIP expects a record number ofDDoS attacks in 2018. This is what the NBIP attributes to the proliferation of malicious parties that offer DDoS services on the internet.
The increasing number of Internet of Things devices will also cause a larger number of attacks because they are easy to infect to serve as part of a botnet that performs DDoS attacks.
The NBIP developed the Nationale Wasstraat (NaWas) in 2013, which protects NBIP participants against DDoS attacks. The NaWas, a concept in the Netherlands, was established together with AMS-IX, NL-IX and the Dutch Hosting Provider Association (DHPA). Data from NaWas participants were analyzed for the report.