Denial of Service and Fighting Back
Denial of Service
There's more than one way to beat a denial-of-service attack, but first you will have to catch it. Two years after the well publicized attacks on Yahoo, eBay and CNN, DoS attacks are still found all over - they just aren't discussed. The advent of new attack technologies, such as Naptha and Reflective DoS attacks, are making the process of protecting networks even more difficult.In a perfect world, your ISP would detect and deal with the growing number of these security attacks on its end easily. But because many ISPs do not want to take on the added burden and legal responsibility to provide, or claim to provide DoS protection, you'll most likely have to deal with DoS attacks on your own. Whether they are randomized DoS, general distributed DoS or reflective distributed DoS; you will have to work on your security arsenal.
Today, there is a range of vendors providing DoS attack-detection and mitigation products. How each product approaches the problem runs the gamut. Signature vs. anomaly detection. Inline vs. network tap. Active vs. passive. Who does what and how does it all work?
A group of vendors were invited to help discern the advantages and disadvantages of each approach. Asta Networks, Captus Networks, CS3, Lancope, Mazu Networks, Radware and Webscreen agreed to participate in a partnered review. AppSafe, Arbor Networks, CacheFlow, Check Point Software, Extreme Networks, FloodGuard, Internet Security Systems, IntruVert, NetScreen, Reactive Network Solutions, Recourse Technologies, Riverhead and TopLayer Networks were not able to contribute.
The tests determined that their products all work about the same in detecting attacks, with most of the products detecting 95% of the attacks that were launched.
The deciding factor lies in the mitigation techniques available to you.
How concerned are you that valid traffic still needs to pass?
How much control do you want over the process?
What type of reports and how much data do you want to have available to you?
Once you have answered these important questions, you will quickly be able to narrow down the top choices for your environment.
You will find much more on this topic at WorldsLargestNetwork.com
| |||||||
 | |||||||
| |||||||
| |||||||
| |||||||
|
WorldsLargestNetwork.com
