akamai’s [state of the internet]

2015 execut ive review Q2 2015 / connect iv i ty Q2 2015 / secur i ty

[state of the internet] / 2015 executive review [Q2 2015 connect iv i ty + Q2 2015 secur i ty ]

2 Download the full reports at www.stateoftheinternet.com

about the review / Akamai, the world’s leading

content delivery network (CDN) provider, uses its

globally distributed Intelligent PlatformTM to process

approximately 2 trillion Internet transactions each day.

This allows us to gather massive amounts of data on

many metrics related to broadband connectivity, cloud

security and media delivery. The State of the Internet

program was built to leverage that data to better enable

businesses and governments to make intelligent,

strategic decisions. Each quarter, Akamai uses this data

to publish reports in the State of the Internet program

focused on broadband connectivity and cloud security.

[state of the internet] / 2015 executive review [Q2 2015 connect iv i ty + Q2 2015 secur i ty ]

3 Download the full reports at www.stateoftheinternet.com

GLOBAL BROADBAND LEADERS

5.1 Mbps /Global Average

Connection Speed

32.5 Mbps /Global Average

Peak Connection Speed

Country/Region Q2 2015Avg. Mbps

– Global 5.1

1 South Korea 23.1

2 Hong Kong 17.0

3 Japan 16.4

4 Sweden 16.1

5 Switzerland 15.6

6 Netherlands 15.2

7 Norway 14.3

8 Latvia 14.2

9 Finland 14.0

10 Czech Republic 13.9

Country/Region Q2 2015Peak Mbps

– Global 32.5

1 Singapore 108.3

2 Hong Kong 94.8

3 South Korea 83.3

4 Japan 75.1

5 Taiwan 74.5

6 Romania 72.1

7 Qatar 71.7

8 Israel 71.4

9 Sweden 62.8

10 Macao 62.6

Global Top 10 / Average Peak Connection SpeedsGlobal Top 10 / Average Connection Speeds

internet and broadband adoption / The State of the Internet / Connectivity Report is now in its 8th year of publication. In it, Akamai reports extensively on Internet connection speeds, network connectivity/availability issues, and IPv6 adoption progress.

[state of the internet] / 2015 executive review [Q2 2015 connect iv i ty + Q2 2015 secur i ty ]

4 Download the full reports at www.stateoftheinternet.com

IPv4

Ad

dre

sses

(Mill

ions

)

0

5

10

15

20

25

3035

4540

50

RIPELACNICARINAPNICAFRINIC

1-Apr 8-Apr 15-Apr 22-Apr 29-Apr 27-May 3-Jun 10-Jun 17-Jun 24-Jun6-May 13-May 20-May

Broadband Adoption / This section illustrates the global leaders for the highest percentage of unique ip addresses connecting to Akamai with average connection speeds above four separate thresholds.

Available IPv4 Space Continues Steady Decline:

Available IPv4 Address Pool Size by RIR, Q2 2015

96%4+ Mbps

Bulgaria/ South Korea

75%10+ Mbps

South Korea

53%15+ Mbps

South Korea

29%25+ Mbps

South Korea

DOWNLOAD THE FULL REPORT

TAPHERE

IPv4 Exhaustion and IPv6 Adoption / Country with the highest percentage of

content requests made to Akamai over IPV6:

38%OF TRAFFIC OVER IPv6

Belgium

[state of the internet] / 2015 executive review [Q2 2015 connect iv i ty + Q2 2015 secur i ty ]

5 Download the full reports at www.stateoftheinternet.com

Cloud Security / The q2 2015 State of the Internet / Security Report combines DDoS attack data previously published in the classic State of the Internet Report with the data previously published in the quarterly Prolexic DDoS Attack Report.

attack spotlight / About half of all DDoS attack campaigns mitigated by Akamai used two or more attack vectors. One specific combination of vectors has appeared repeatedly in attacks greater than 100 Gbps: the use of syn and udp vectors with extra data padding. This attack reached a peak bandwidth of 249 Gbps and a peak packet per second rate of 46 Mpps.

DDoS Update / The number of DDoS attacks continued to increase substantially in q2 2015, once again setting a record for the number of DDoS attacks observed over our network. Average peak attack bandwidth and volume decreased in q2 2015 compared to q1 2015, but still remained significantly lower than the peak averages

CLOUD SECURITY

YEAR-OVER-YEAR STATS [Q2 2014 – Q2 2015]

132% increase in total DDoS attacks

12.5% decrease in average peak bandwidth

75% decrease in average peak packets per second

122% increase in application layer attacks

133% increase in infrastructure layer attacks

19% increase in average attack duration

SSDP attacks: 0 vs. 16% of all attacks

LARGEST ATTACK

Q2 2015

Q1 2015

249 Gbps

170 Gbps

[state of the internet] / 2015 executive review [Q2 2015 connect iv i ty + Q2 2015 secur i ty ]

6 Download the full reports at www.stateoftheinternet.com

we saw in q2 2014, continuing a trend in which malicious actors favor smaller but longer-lasting attacks. Some notable exceptions to this trend were twelve 100+ Gbps attacks, including two 200+ Gbps attacks, the largest of which peaked at 249 Gbps.

260

240

220

200

180

160

140

120

100

80

60

40

20

0

Internet/Telecom Gaming

Attacks Date and Starting Time (GMT)

3-A

pr

13:1

2

4-A

pr

4:58

8-A

pr

5:32

9-A

pr

3:40

11-A

pr

3:30

18-A

pr

4:44

24-A

pr

3:25

25-A

pr

14:1

5

30-A

pr

6:03

1-M

ay14

:25

4-M

ay6:

51

18-M

ay20

:15

Gb

ps

249

144

106 109

144

210

118

157145

126 121115

Q2 2015 DDoS Attacks > 100 Gbps

China / 37%

Korea / 4% Russia / 4% Germany / 4% Australia / 4% Taiwan / 4%

USA / 17% UK / 10% India / 7% Spain / 6%

Top 10 source countries for DDoS attacks in Q2 2015 / Non-spoofed attacking IP addresses by source country, for DDoS attacks mitigated during Q2 2015

[state of the internet] / 2015 executive review [Q2 2015 connect iv i ty + Q2 2015 secur i ty ]

7 Download the full reports at www.stateoftheinternet.com

web application attack statistics / In q2 2015, Akamai analyzed over 350 million web application attacks observed on the Akamai Intelligent Platform, focusing on nine of the most popular attack vectors. These include sql injection (SQLi), local file inclusion (lfi), remote file inclusion (rfi), php injection (PHPi), command injection (CMDi), ognl injection using ognl Java Expressing Language (JAVAi), malicious file upload (mfi), and two attack vectors previously not highlighted in the State of the Internet / Security Report before this quarter—ShellShock and cross-site scripting (xss).

The three most observed web application attack vectors were ShellShock, at 49 percent of all attacks, SQLi, at 26 percent, and lfi, at 18 percent.

The most targeted industries for web application attacks in q2 2015 were retail, and financial services.

250,000

200,000

150,000

100,000

50,000

0

SQLi Attacks LFI Attacks

B2BGoods/Services

B2CGoods/Services

FinancialServices

HighTechnology

Hotel & Travel Media &Entertainment

Public Sector Retail

Normalized SQLi and LFI Attacks by Industry, Q2 2015

Retail and financial services were the most popular targets of SQLi and LFI attacks in Q2 2015

[state of the internet]

EditorDavid Belson

DesignShawn Doughty, Creative DirectionBrendan O’Hara, Art Direction/Design

Contactstateoftheinternet@akamai.comTwitter: @akamai_soti / @akamai www.stateoftheinternet.com

[state of the internet] / secur i ty

ContributorsProlexic Security Engineering & Research TeamAkamai Threat Research TeamAkamai Customer Security Incident Response Team

DesignShawn Doughty, Creative DirectionBrendan O’Hara, Art Direction/Design

Contactstateoftheinternet-security@akamai.comTwitter: @State_Internet / @akamai www.stateoftheinternet.com

©2015 Akamai Technologies, Inc. All Rights Reserved. Reproduction in whole or in part in any form or medium without express written permission is prohibited. Akamai and the Akamai wave logo are registered trademarks. Other trademarks contained herein are the property of their respective owners. Akamai believes that the information in this publication is accurate as of its publication date; such information is subject to change without notice. Published 09/15.

Akamai is headquartered in Cambridge, Massachusetts in the United States with operations in more than 57 offices around the world. Our services and renowned customer care are designed to enable businesses to provide an unparalleled Internet experience for their customers worldwide. Addresses, phone numbers and contact information for all locations are listed on www.akamai.com/locations.

As the global leader in Content Delivery Network (cdn) services, Akamai makes the Internet fast, reliable and secure for its customers. The company’s advanced web performance, mobile performance, cloud security and media delivery solutions are revolutionizing how businesses optimize consumer, enterprise and entertainment experiences for any device, anywhere. To learn how Akamai solutions and its team of Internet experts are helping businesses move faster forward, please visit www.akamai.com or blogs.akamai.com, and follow @Akamai on Twitter.

Download the Ful l Reports

[state of the internet] report

Q2 2015

[state of the internet] / security report

Q2 2015