{"id":5648,"date":"2020-10-05T18:38:58","date_gmt":"2020-10-05T16:38:58","guid":{"rendered":"https:\/\/tekmart.co.za\/t-blog\/?p=5648"},"modified":"2020-10-05T18:39:00","modified_gmt":"2020-10-05T16:39:00","slug":"3-ways-to-prevent-ddos-attacks-on-networks","status":"publish","type":"post","link":"https:\/\/tekmart.co.za\/t-blog\/3-ways-to-prevent-ddos-attacks-on-networks\/","title":{"rendered":"3 ways to prevent DDoS attacks on networks"},"content":{"rendered":"Reading Time-approximately:<\/span> 2<\/span> minutes<\/span><\/span>\n

DDoS attacks on networks can result in devastating and expensive damage for organizations. Learn three ways to prevent and respond to DDoS attacks to keep company networks secure.<\/strong><\/h2>\n\n\n\n
\"John<\/figure>\n\n\n\n

By John Cavanaugh<\/a><\/p>\n\n\n\n

Denial of service, or DoS, attacks emerged in the early days of the web and commercialization of the internet. These attacks literally deny service and make a resource scarce; in many cases, attackers simply ping a network or server to busy it out.<\/p>\n\n\n\n

On the defense, enterprises and service providers responded by blocklisting devices where the attacks originated. As the cat-and-mouse games became more sophisticated, attackers started to use thousands of bots to create what are now called distributed DoS (DDoS) attacks.<\/strong><\/p><\/blockquote>\n\n\n\n

For example, one attack used several hundred thousand bots in a rotation spread across a bot army of more than 3 million devices to attack a nation-state and\u00a0shut down a government service. That attack generated over 500 Gbps of traffic.<\/p>\n\n\n\n

How to prevent DDoS attacks on networks<\/h3>\n\n\n\n

How can an enterprise respond? The following three approaches detail how to prevent or respond to DDoS attacks on networks:<\/p>\n\n\n\n

  1. Buy a service from an internet service provider (ISP).<\/strong>\u00a0Many ISPs offer DDoS mitigation services, but when an enterprise network gets hit, the enterprise needs to report the incident to the ISP to begin mitigation. This strategy is called\u00a0clean pipe\u00a0and is popular with ISPs, as they charge for the service, but it often results in a 30- to 60-minute delay before mitigation starts.<\/li>
  2. Keep it in-house and DIY.<\/strong>\u00a0Organizations can prevent and respond to DDoS attacks in-house with an intrusion prevention system, firewall technology and specialized hardware purpose-built to defend against DDoS attacks. Unfortunately, the affected traffic is already on the network eating up valuable bandwidth. That makes this approach best suited to enterprises with equipment in\u00a0colocation facilities, where traffic reaches ISPs\u00a0through a cross-connect, which protects downstream bandwidth that goes to the rest of the company.<\/li>
  3. Use a content delivery network (CDN).<\/strong>\u00a0This approach minimizes exposure of corporate infrastructure, as IT teams can place the infrastructure behind a CDN. These networks are large and diverse, and if the organization subscribes to DNS and DDoS mitigation, they can protect e-commerce sites, as well as the enterprise itself.<\/li><\/ol>\n\n\n\n
    \n