Who are you going to call? CNS10 Dec 2013 18:21
Stephen Gates, chief security evangelist at Corero Network Security, a maker of anti-DDoS weapons, “There are a lot of players in the field, and the tools (to perform DDoS) are so easy to use and so widely available. They are very effective. And the attacks work. That is why DDoS is not going away.”
Gates recounted the 2013 DDoS history where, initially, the big attacks were so-called volumetric attacks, meaning the perpetrators sought to drown a target with a tidal wave of meaningless data.
Various defense companies quickly developed techniques to ward off these attacks and, poof, the DDoS attackers shifted format and unleashed application layer attacks that in effect let the victim computers wear themselves out dealing with nonsensical requests (password reset requests for non-members, for instance).Those attacks necessitated yet other kinds of defenses.
In all probability, DDoS attackers are already working up yet newer attack vectors, to unleash as defenses for present attacks tighten.
Bottom line: In 2014 every institution needs a DDoS response plan, said Gates, and it should be in writing and spell out what steps are to be taken in the event the institution falls under assault.
Because exactly that may happen, be the attacker an employee with a grudge, an unhappy member, a hacktivist group, or a criminal cartel. They all are using DDoS now and that’s why every credit union needs to know what it will do when attacked.
http://www.cutimes.com/2013/12/04/5-cyber-threats-coming-at-you-in-2014?ref=hp&t=cyber-security-fraud&page=7