How to be protected from DDoS attack? TADetails

Main article: Protection against DDoS attacks

What is DDoS attack and what it is dangerous by?

The abbreviation of DDoS is decrypted as Distributed Denial of Service (the distributed failure in service). The similar attack happens from a set of the infected computers which send requests to one server, load data transmission channel and as a result do not allow legitimate users to get access to the portal, service or service.

DDoS attack can continue long enough, change intensity, tactics and vectors. As a result for hours and even days the server remains unavailable, the company loses clients, certain business processes stop. Large DDoS attacks are capable to cause a serious loss to business and reputation of the company. According to securelist.ru, the longest DDoS attack in the second quarter continued 2015 205 hours (8.5 days).

Who risks to fall a victim of DDoS?

DDoS attacks – one of the most widespread and the methods of impact on the organizations checked by time. During their existence different methods and technologies of carrying out were developed.

DDoS attack can cause a serious financial and reputation loss to business

For the Internet companies of the practician DDoS became one of instruments of unfair competition, but in connection with availability of ready schemes and even services of carrying out DDoS attacks in the black market, any organizations – from government departments to non-profit public structures, from large corporations before small business can fall a victim of the attack.

How to recognize the attack?

It is very simple to recognize the attack of DDoS at a final stage: in your organization Internet services cease to work. It is much more important to define DDoS at an early stage of its start when still it is possible to take measures. For this purpose it is necessary to be prepared in advance and to use special hardware and software systems, or to order service of cleaning and monitoring of the attacks from the third-party supplier.

What types of the attacks exist?

DDoS attacks can differ in mass character, the purpose and refinement. It depends on that how many computers participate in them whether there is an attack on all server or a certain service and also from the actions attacking. The modern level of development the technician of DDoS allows to imitate actions of normal users so "empty" requests appear to be distinguished from the presents very difficult.

Whether there are specifics of protection against DDoS for different types of the attacks?

Yes, it is possible to be protected from the attacks of different power by different means. If it is about the small company, it is possible to be limited to competent settings of network equipment and servers. The high-quality work which is carried out by specialists will allow the server to transfer the small attacks happening from 100-200 infected computers. Usually at the same time open superstructures, for example on Ngnix are used.

In case the company is the potential victim for more large-scale attacks, it is possible to cope with them only using special means. According to experts of F5 Networks company, protection against DDoS can be implemented effectively on gateways if to install the special hardware technical means filtering and analyzing traffic with high speed. The example of such solution in a line of F5 Networks is BIG-IP Advanced Firewall Manager.

If the attack exceeds all expectations or it was unexpected, it is possible to address to special service of filtering, such as F5 Silverline. For this purpose it is necessary that the telecom operator directed traffic to other address where there are powerful servers which will deal with flow of false requests. Such services offer as telecom operators (Rostelecom, MegaFon, VimpelCom), and specialists in information security field (F5 Silverline, Kaspersky Lab, Qurator, Akamai).

How to be protected if the attack already began?

If the attack already goes, it is necessary to react quickly. "The IT service should have near at hand two contacts: phone of the specialist from provider and also contacts of service of filtering in case its services will be necessary", - Alexander Serebryakov from F5 Networks comments.

After completion of the attack it is necessary to analyze it and to select the solutions allowing to cope with it. For example, the products BIG-IP Advanced Firewall Manager which can be scaled for protection against the attack of almost any intensity and also are implemented in the form of separate devices or virtual machines.

What cost of solutions for protection against DDoS?

The cost of protection against DDoS depends on the degree of threat. For example, the call of the specialist for installation, setup and configuring of servers in Moscow will cost up to $1000 from calculation in day. The price of the complete solutions capable to fight against the sophisticated and qualitatively prepared DDoS attacks begins from $10 thousand. However the order of external service of cleaning and monitoring will cost much more expensive. Anyway, the price of creation of protection against DDoS is lower, than that damage which even one serious attack can cause.