DDoS Threats Landscape : Countering Large-scale DDoS attacks
Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps...
Transcript of Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps...
![Page 1: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/1.jpg)
1
Real Life DoS/DDOS Threats and Benefits of Deep DDOS Inspection
Labris Networks
Oğuz YILMAZ CTO
![Page 2: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/2.jpg)
2
Today
• Labris Networks
• L7 Attacks
• L7 HTTP DDoS Detection Problems
• Case Study: Deep DDOS Inspection (DDI™) for HTTP
• Case Study: L7 NTP Attacks
• Case Study: L7 Gaming World
• Future DDOS Predictions
• DDOS CERT
![Page 3: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/3.jpg)
3
Industry NETWORK SECURITY
Founded 2002
Customers 3500+
Verticals Served ALL VERTICAL MARKETSFrom 5 users to 1 Million users
Area Served EMEA (20+ countries)
Products NETWORK SECURITY SOFTWAREUTM APPLIANCESDDOS MITIGATION APPLIANCES
WINNER
![Page 4: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/4.jpg)
4
Our Current Offices
Turkey
United Kingdom Czech Republic
![Page 5: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/5.jpg)
![Page 6: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/6.jpg)
621.11.2014 www.labrisnetworks.com 6
Product & Services
MNG
LOG
Database UpdatesFirmware UpdatesTechnical SupportNetwork Security Trainings
Database UpdatesFirmware UpdatesTechnical SupportSpecific DDoS TrainingsDDoS Mitigation ConsultancyDDoS CERT Service
![Page 7: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/7.jpg)
7
HARPP DDOS Protection ModelBusiness Protection
Service Protection
Application Protection
HARPP Scrubbing Services
HARPP DDOS CERT
![Page 8: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/8.jpg)
8
CPE in front of conventional network security equipment
+ DDoS Specific High Performance Hardware+ Anomaly Detection with Artificial Intelligence (CW AI)+ Application specific protection with plugins+ DoS/DDoS specific IPS+ IP Reputation Networks+ Evidence collection and timestamping
![Page 9: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/9.jpg)
L7 DDoS Attacks
![Page 10: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/10.jpg)
10
L7 DDoS Attacks
About TCP;
• Established TCP is real IP traffic
• Amplification is possible
• If the attacker is detected, blocking is easy
• Today, %60 of DoS/DDoS attacks is on L7.
• This rate is increasing.
![Page 11: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/11.jpg)
11
L7 DDoS Attacks
• Common attacks types
• HTTP GET/POST Floods
• Application Exploit attacks
• DNS Floods
• NTP Floods
• HTTP Slow Post
• HTTP Slowloris
![Page 12: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/12.jpg)
Case Study
Customer Type: E-commerce
Mobile apps and L7 HTTP DDoS Detection Problems
![Page 13: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/13.jpg)
13
L7 HTTP DDoS Detection Problems
• At L3, there is shadows of L7 attacks. It is possible to try to prevent an attack via L3 information. However, with high false positives.
• Shallow looking at L7 also has high number of false positives.
One of our ecommerce customer:
"www.test.com": {"count": 8, "rate": 0.8, "uri": {
"/ProductHandler.ashx?hCase=CampaignProducts&CampaignID=11237&GenderCategoryID=undefined&CCId=-1&CategoryID=-1&Size=-1&MainCategory=-1&OrderBy=like": 1,
"/ProductHandler.ashx?hCase=CampaignProducts&CampaignID=11237&GenderCategoryID=-1&CCId=-1&CategoryID=-1&Size=-1&MainCategory=-1&OrderBy=like": 7
}}
Totally innocent request. Only requests different ecommerce products in a page through a mobile application.
Mobile applications has limited caching and increase number of requests.
![Page 14: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/14.jpg)
14
L7 HTTP DDoS Detection Problems
• Today, HTTP is changing.
• Programs and applications are becoming to work on cloud data, not local data.
• Web technologies promise high interactivity. Not «Request and wait to come», «already coming». Not Request/Response, but Stream.
• APIs and technologies are designed for this.
• REST & AJAX
• However, All this content is carried by HTTP.
![Page 15: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/15.jpg)
15
L7 HTTP DDoS Detection Problems
Each http request involves latency in itself
![Page 16: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/16.jpg)
16
L7 HTTP DDoS Detection Problems
• Average number of contents in a web page : 50• Browsers requests in parallel.
• RTT in each connection increase loading time.
![Page 17: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/17.jpg)
17
L7 HTTP DDoS Detection Problems
Some solutions have been found and used:
• Pipelining
In a view from L3, no much connections seen.
![Page 18: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/18.jpg)
18
L7 HTTP DDoS Detection Problems
• SPDY & HTTP/2Multiplexed stream
Stream priorization
Stateful HTTP header compression
Also for SPDY, shadow in L3 is different.
![Page 19: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/19.jpg)
19
L7 HTTP DDoS Detection Problems
• Rate and threshold based L3 methods and even threshold based L7 methods are erroneous when in NAT’ed and one-to-one traffic.
Tek PC
NAT/CGNAT
3 GET/s 100 GET/s200 gerçek tekil PC
![Page 20: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/20.jpg)
20
L7 HTTP DDoS Detection Problems
• Sometimes, detailed inspection can be faulty:
/index.php?id=4348583
/index.php?id=1249584
/index.php?id=6747637
/index.php?id=2874656
/index.php?id=5657576
/index.php?id=0954767
Non-smart deep inspection may sense this sample as legitimate.
![Page 21: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/21.jpg)
21
L7 HTTP DDoS Detection Problems
Trying to prevent L7 attacks with L3 methods lead unacceptable false positives.
Even inspection in Layer 7 requires being smart.
![Page 22: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/22.jpg)
22
HTTP için Deep DDOS Inspection (DDI™)
• DDI™ inspects L7
• NAT, Single PC recognition
• Protocol conformance
• URL change check
• Robot detection in URL and HTTP headers
• Detection of known attacks tools
• POST content check
![Page 23: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/23.jpg)
23
Protocol Specific Reporting
![Page 24: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/24.jpg)
Case Study
Customer Type: Datacenter
L7 NTP Floods
![Page 25: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/25.jpg)
25
NTP Flood
• NTP is old protocol working on UDP.
• UDP: No source IP check
• NTP Protocol is problematic
• monlist: NTP server will list latest 600 clients IP address
• iostats: NTP server will list server statistics
• Running protocol commands without authentication
• 400 Gbps of attack has been recorded (Cloudflare)
• HARPP CERT has resisted to 14 Gbps of SYN Flood.
![Page 26: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/26.jpg)
26
NTP Flood
# ntpdc –c monlist NTPIP
Request: 60 Byte
Response: 50x-300x
![Page 27: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/27.jpg)
27
NTP Flood
![Page 28: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/28.jpg)
28
NTP Flood
• L7 inspection finds monlist/iolist request & responses and block easily.
• ISP cooperation is must.
More information on attack and defense:
http://www.harppddos.com/ntp-reflection-attack/
![Page 29: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/29.jpg)
Case Study
Customer Type: Gaming
Application specific plugins
![Page 30: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/30.jpg)
30
Gaming
• Knightonline, Teamspeak, Counterstrike, Metin2
• %25 of World e-gaming market is MMO (Massively Multiplayer Online Games)
• Remark: %2 of Canadian GDP is gaming
• Gaming development practices are not good at security. Secure development & Secure design
• Connection rate thresholds for games are very low
• Gaming is competitive. Hitting below the belt is common.
![Page 31: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/31.jpg)
31
Gaming
Sample Game: Knight Online
KO uses 3 different port. For example, 12001, 12023, 12100. These ports is connected in order.
12100 -> 12023 -> 1201
Each port has different simultaneous connection and packet frequency12001: 1-312023: 112100: 1-280 pps is minimum at 12001.
Connections from internet cafes are common.
Connection count and server software resistance are low. It is compulsory to inspect according to game characteristics.
![Page 32: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/32.jpg)
32
Gaming
HARPP Application ProtectionEcosystem
HARPP KO plugin check port connection order and packet frequency for botnet and application specific slowlorisattacks.
Other pluginsTeamspeak
SIP
UDP Spoof Detection
HTTP
…
![Page 33: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/33.jpg)
Future DDoS Predictions
![Page 34: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/34.jpg)
34
Future DDoS Predictions
• Today:
• More than 30 common DoS/DDoS types (except application specific exploits)
• Future:
• APT characteristics in DDoS
• Migration to L7
• Out of sight nw NTPs
• Real user mimic
![Page 35: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/35.jpg)
35
Mobile surpassesfixed
Mobile is faster Internet is diversified.
~
Security threats arediversified
Mobile Rises
![Page 36: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/36.jpg)
36
Mobile based DDoS
3G1 Mbps per Thing
5GGbps’s per Thing
4G150 Mbps per Thing
+
Things (Trillions of)
![Page 37: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/37.jpg)
HARPP
![Page 38: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/38.jpg)
38
HARPP’s Dashboard
![Page 39: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/39.jpg)
39
DDOS CERT
Our Computer Emergency Response Team is ready when you need help!
![Page 40: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/40.jpg)
40
HARPP DDOS CERT
• Customer Internet services check
• Line status detection• Slowed network/Packet loss
detection• Emergency
intervention/protection• DDoS Attack
reporting/recommendations• Availability Reporting• Healthcheck reporting and
improvement suggestions
DDOS CERT AVAILABILITY DASHBOARD
Customer Network
HARPPScrubbing Services
![Page 41: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/41.jpg)
41
HARPP Scrubbing Services
• Standard*
• Premium**
HARPP Scrubbing Services
* Standard Scrubbing services provide up to 1-5-10 Gbit of volumetric attack protection** Premium Scrubbing Services provide Up to 500 Gbit of volumetric attack protection
![Page 42: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/42.jpg)
42
WORLDWIDE SECURITY MARKET GROWTH
•The worldwide security technology and services market is forecast to reach $67.2 billion in 2013, up 8.7 percent from $61.8 billion in 2012.
•The market is expected to grow to more than $86 billion in 2016. (Gartner, Inc.)
NETWORK SECURITY MARKET GROWTH
CLOUD-BASED SECURITY MARKET GROWTH
Security (Growth & Threats)
![Page 43: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/43.jpg)
Thank you
For your further questions: oguz at labrisnetworks.com
![Page 44: Real Life DoS/DDOS Threats and Benefits of Deep DDOS ... · • HARPP CERT has resisted to 14 Gbps of SYN Flood. 26 NTP Flood # ntpdc –c monlist NTPIP Request: 60 Byte Response:](https://reader033.fdocuments.us/reader033/viewer/2022042416/5f31e258ad8e54577c5973e8/html5/thumbnails/44.jpg)
44
Labris Networks HeadquartersT: +90 312 210 [email protected]
Labris Networks International Markets officeLevent İstanbul
Labris Networks CWL İstanbulYıldız Teknik Üniversitesi
UK Sales OfficeT: +44 7703 503242, [email protected]
Eastern Europe Sales Offices – Prague&WarsawT: +420 220 994 422, [email protected]
Get in touch..