Arbor Networks Research Shows 36% Increase in Advanced Persistent Threats and Doubling of Attacks Against Mobile Networks
The 9th Annual Infrastructure Security Report provides insights into the global cyber threat landscape
- 36% increase in the number of organizations attacked by advanced persistent threats (APTs)
- More than doubling of attacks against mobile networks
- Application-level attacks are now commonplace
- Dramatic increase in high-volume DDoS attacks
- Data centers are targets of frequent and powerful attacks
- DNS remains extremely vulnerable
Arbor Networks, Inc. has released its 9th Annual Worldwide Infrastructure Security Report (WISR), providing a rare glimpse into the most significant challenges facing today’s network managers. The annual report is based on survey data from service providers, enterprise network operators, cloud providers, hosting providers and other network managers from around the world, and provides a true picture of the security threats organizations face and the strategies they are adopting to address them.
Arbor Networks’ long-standing relationships with its customers and its reputation as a trusted advisor and solutions provider make this report possible each year. Click here (registration required) to access the Annual9th Global Infrastructure Security Report from Arbor Networks.
“From ISPs to large enterprises, security teams and IT departments face a dynamic landscape of attacks and threats, as well as capable and persistent adversaries. The 9th Annual Report makes this clear,” said Matthew Moynahan, President of Arbor Networks. “There is no single magic bullet, and the notion that technology alone can guarantee network security is a fallacy. Multi-layered defenses are essential, but so is the application of best practices to the processes followed by the people who implement them.
MAIN CONCLUSIONS:
Internal network and advanced persistent threats
- Respondents rated botted hosts as the number one risk.
- The percentage of respondents who encountered advanced persistent threats (APTs) on their network has increased, year-over-year, from 20% to 30%.
- 57% of participants do not have a solution for identifying their employees' devices that have access to the corporate network.
DDoS attacks against mobile networks
more than double
- Nearly 25% of respondents who offer mobile services reported that DDoS attacks had impacted their mobile Internet infrastructure (Gi). This percentage is more than double compared to the previous year.
Application-level attacks are now commonplace
- Application-level attacks are now common and almost all respondents reported being threatened by such attacks during the survey period.
- An increase of 17% compared to the previous year is seen in application-level attacks targeting encrypted Web services (HTTPS).
Dramatic increase in the volume of DDoS
attacks
- Based on previous years' research, the largest attack was in the 100 Gbps range. In 2013, the upper limit of attacks reached 309 Gbps, with many reporting attacks exceeding 100 Gbps.
Data centers are the main target of DDoS attacks
- More than 70% of respondents who manage data centers reported DDoS attacks in 2013. This figure is significantly higher than the previous year, which was less than 50%.
- More than a third of participants, almost double the rate last year, experienced attacks that exceeded the total available Internet connectivity.
- About 10% of respondents experienced more than 100 attacks per month.
DNS infrastructure remains vulnerable
- More than a third of respondents experienced DDoS attacks on their DNS infrastructure that impacted their customers – a 25% increase over last year.
- More than a quarter of respondents reported that there is no security team within their organization responsible for securing DNS infrastructure. This figure, up from 19% the previous year, is surprising given the number of significant DNS reflection/amplification attacks reported during the survey period.
Demographics of the survey
- 220 responses, an increase from the 130 of the previous year, from a set of service providers and network managers from all over the world.
- This year, over 68% of respondents are service providers, offering a global picture of data traffic and threats targeting their networks, services and customers.
- The data covers the period from November 2012 to October 2013.
Additional sources
- The entire survey is available here (registration required)
- Watch the webinar for a more extensive update on the main conclusions of the research.
- Visit the blog to see a summary of the main conclusions of the research.
- Download the infographics resulting from the research from Arbor Networks' Pinterest
- Visit Arbor Networks' SlideShare page and access the research presentation
- Follow @arbornetworks and the hashtag #WISR14 on Twitter for more information about the survey.
About Arbor Networks
Arbor Networks, Inc.helps the world's largest enterprises and service providers protect their networks from DDoS attacks and other advanced online threats. According to Infonetics Research, Arbor is the world's leading provider of DDoS protection for enterprises and communications service providers. Combining NetFlow technology with packet capture techniques, Arbor's advanced solutions ensure the ability to fully monitor the entire network infrastructure, thus enabling the rapid detection and response to attacks implemented through malware or a malicious user. Arbor also has the market's leading analytics that guarantee dynamic response to network attacks, historical data analysis, visualization, collection and analysis of cybercrime evidence. Arbor strives to act as a "force multiplier", helping an enterprise's security and IT managers gain specialized knowledge to respond to malicious attacks. Arbor’s goal is to provide a more complete picture of the network, as well as security information, so that its customers can resolve potential problems faster, reducing the risk to their business. To learn more about Arbor’s products and services, please visit www.arbornetworks.com .Arbor’s research and analysis of malicious attacks, as well as data from the global ATLAS information system, can be found on the ATLAS Threat Portal.
ADAPTit A. E – Exclusive representative of Arbor Networks in Greece
6 Favierou Metamorfosi,
tel: 2105131640
Email: info@adaptit.gr
For more information, please contact:
CIVITAS Ketchum SA.
Nikos Patrinos, tel: 210 6852400 – n.patrinos@civitas.gr
