DDoS: Attack sizes plateau; complex multi-vector attacks on the rise – The largest attack reported was 60 Gbps, same as 2011; and 46 percent reported multi-vector attacks.
This year’s results confirm that application-layer and multi-vector attacks are continuing to evolve while volumetric attacks are starting to plateau in terms of size. … Attackers have now turned to sophisticated, long-lived, multi-vector attacks – combinations of attack vectors designed to cut through the defenses an organization has in place – to achieve their goals. … This year’s report includes a case study on the ongoing attacks against U.S. financial services organizations, a great example of a multi-vector attack.
Data centers and cloud services are increasingly victimized – 94 percent of data center operators reported attacks, and 90 percent of those reported operational expenses as a business impact.
As more companies move their services to the cloud, they now have to be wary of the shared risks and the potential for collateral damage. DNS infrastructure remains vulnerable – 27 percent experienced customer-impacting DDoS attacks on their DNS infrastructure—a significant increase over the 12 percent of respondents from last year’s survey. 71 percent of respondents reported good visibility at Layers 3 and 4 but only 27 percent reported Layer 7 visibility.
Link: http://www.net-security.org/secworld.php?id=14323