Story image

Why e-commerce needs DDoS protection for Cyber Monday

23 Nov 18

Article by Neustar WW Security Sale vice president Dorean Kass

Protecting yourself and your network has never been more important, especially in the lead up to one of the biggest retail events of the year - Black Friday and Cyber Monday - with online consumers in search for the biggest discounts.

In light of this, retailers should be prepared for potential DDoS attacks as fraudsters aim to find vulnerabilities within a network, locate backdoors for exfiltration and use multi-layered techniques as a distraction for other malicious activities.

Suffering from a DDoS attack during this busy sales time could prove to not only be a financial disaster but also severely impact your brand reputation.

DDoS defence and protection techniques are on the rise, not just due to the large attacks that have been recorded, but also because of the fever pitch pace of attacks in recent years.

DDoS attacks can cripple an organisation, a network or even a country and recent attacks have been larger and more complex than ever.

To stay ahead, businesses can adopt a number of DDoS prevention techniques, these include incorporating defensive strategies such as enhanced DNS protection, adoption of web application firewalls (WAF) and scrubbing centres.

Why you need DDoS protection

According to CupoNation, Australians spent over $200 million during Black Friday last year, meaning that it’s essential for those in IT and security roles within e-commerce companies to be familiar with the reasons why an organisation needs DDoS protection, as visibility and preparation are the key tenets for DDoS mitigation.

DDoS attacks are on the increase

According to Kaspersky Labs, the rate of businesses hit by DDoS attacks almost doubled in 2017, from 17% in 2016 to 33%. Furthermore, a 1.35Tbps DDoS attack was recorded earlier this year and was followed by a 1.7Tbps attack. In 2018, the volume and severity of attacks have increased with perpetrators adding botnets, vectors, ports and other malware to amplify the magnitude of their attack.

DDoS attacks are evolving

Innovative criminals are always finding new ways to incorporate new technologies into their attacks, from utilising botnets, Trojan horses and crypto worms to leveraging the innovation of IoT devices. Specifically, during this upcoming busy sales period, criminals will get extra cunning by hitting sites with malicious cyber-connection attacks causing websites to send numerous requests to refresh before crashing altogether.

There’s so much you could lose

A loss of revenue can be quickly followed by a loss in brand trust and the subsequent loss of customers and employees. Furthermore, expensive mitigation techniques to clean up the mess made by a DDoS attack can seriously impact any organisation.

Benefits of implementing DDoS mitigation solutions

For those running an e-commerce enabled website, no matter the size, having a secure and comprehensive DDoS mitigation solution ensures your network, data and everything that is important to your organisation is protected when criminals come calling.

Here are the top four reasons why having a directly connected mitigation service can benefit large organisations: 

Lower latency

Due to a direct connection, data can move faster and more freely across systems, which is highly valuable for companies that specialise in gaming, real-time voice communication and financial services where speed is of the utmost importance.

Higher throughput for large bandwidth users

Large organisations with demanding and advanced networks require a directly connected DDoS mitigation solution that provides comprehensive and powerful DDoS protection. Investing in products that focus on transmitting sensitive data quickly and securely are an ideal solution and prevent network congestion.

Fewer access points for intrusion

Removing any unnecessary entry points from a network drastically reduces the potential vulnerabilities which attackers can exploit to launch a DDoS attack, safeguarding networks against malicious traffic or strategies that seek to impair a network’s ability to define routing policies.

Simple configuration for highly complex systems

Investing in products that are simple and don’t require additional software or hardware to transfer data across networks makes it much easier to integrate into an existing network infrastructure. It also gives organisations an alternative to using legacy GRE tunnels. These kinds of system simplifications have traditionally presented technical challenged because they necessitate an overlay network on top of the physical network.

JASK prepares for global rollout of their AI-powered ASOC platform
The JASK ASOC platform automates alert investigations, supposedly freeing the SOC analyst to do what machines can’t. 
Pitfalls to avoid when configuring cloud firewalls
Flexibility and granularity of security controls is good but can still represent a risk for new cloud adopters that don’t recognise some of the configuration pitfalls.
Securing hotel technology to protect customer information
Network security risks increase exponentially as hotels look to incorporate newer technologies to support a range of IoT devices, including smart door locks.
Why total visibility is the key to zero trust
Over time, the basic zero trust model has evolved and matured into what Forrester calls the Zero Trust eXtended (ZTX) Ecosystem.
Gartner names Proofpoint Leader in enterprise information archiving
The report provides a detailed overview of the enterprise information archiving market and evaluates vendors based on completeness of vision and ability to execute.
Tensions on the rise after Huawei CFO arrest
“Recently our corporate CFO, Meng Wanzhou, was provisionally detained by the Canadian authorities on behalf of the United States of America."
Palo Alto Networks integrates RedLock and VM-Series with AWS Security Hub
AWS Security Hub is designed to provide users with a comprehensive view of their high-priority security alerts and compliance status.
Juniper simplifies data integration to improve threat detection
Updates to the Juniper Advanced Threat Prevention Appliances leverage third-party firewalls and security data sources.