CNS9 Jan 2014 06:52
"DDoS – Distributed Denial of Service – won recurrent headlines throughout 2013 and, said Burckmyer at Sage Data Security, “DDoS has become a perennial. “That is, do not assume this threat has passed because there has been quiet for a few months.
Burckmyer also stressed that there are more and more instances where DDoS is used to distract security staff while criminals busy themselves looting the institution via wire transfers and other staple cyber thefts.
Said Stephen Gates, chief security evangelist at Corero Network Security, a maker of anti-DDoS weapons, “There are a lot of players in the field, and the tools (to perform DDoS) are so easy to use and so widely available. They are very effective. And the attacks work. That is why DDoS is not going away.”
Gates recounted the 2013 DDoS history where, initially, the big attacks were so-called volumetric attacks, meaning the perpetrators sought to drown a target with a tidal wave of meaningless data.
Various defense companies quickly developed techniques to ward off these attacks and, poof, the DDoS attackers shifted format and unleashed application layer attacks that in effect let the victim computers wear themselves out dealing with nonsensical requests (password reset requests for non-members, for instance). Those attacks necessitated yet other kinds of defenses.
In all probability, DDoS attackers are already working up newer attack vectors to unleash as defenses for present attacks tighten. In 2014, every institution needs a DDoS response plan, Gates said, and it should define action steps in the event of an attack.
Be the attacker an employee with a grudge, an unhappy member, a hacktivist group, or a criminal cartel, they all are using DDoS now, and that's why every credit union needs to know what it will do when attacked."
http://www.cutimes.com/2014/01/08/5-biggest-cyber-threats-in-2014
Sign In
Follow the stocks
