Nexusguard Discloses New DDoS Mitigation Bypass Method at Black Hat, Bypasses Current DDoS Defense Products
San Jose (PRWEB) July 30, 2013 -- Presented by NXG Labs researcher Tony Miu, the “Universal DDoS Mitigation Bypass” session is one of the most anticipated briefings at Black Hat USA 2013. If the title sounds scary, it’s because it is. Hackers have been using DDoS attacks to bombard websites and disrupt services for more than a decade, but the rapid development of Internet-based services and applications have motivated attackers to commercialize and personalize their methods. The fact that there are seven sessions focused on DDoS attacks at this year’s Black Hat conference exemplifies the increasing threat of these type of attacks.(1)
NXG Labs—Nexusguard’s research arm, assembled by Nexusguard’s R&D team—has been continuously monitoring the evolution of network threats and relentlessly developing DDoS mitigation technologies and strategies. In 2013, NXG Labs teamed up with the Network Threats Information Sharing and Analysis Center (NT-ISAC) for the DDoS research project “Bloodspear”. With the support of Nexusguard’s experience, experts and technologies, NT-ISAC has been making great strides in developing new DDoS mitigation technologies and solutions.(2)
Miu’s keynote will demonstrate a proof-of-concept tool developed in collaboration with NT-ISAC, and it will reveal some shocking implications: every commercially available DDoS mitigation defense systems can be bypassed. The results of this research will first be published at Black Hat and Def Con.
The briefing will cover the latest types of DDoS attacks, from simple to sophisticated, and explain how most commercial DDoS defense systems and services detect and mitigate these attacks—Miu will further show how the proof-of-concept tool bypasses all of the tested defense systems and mitigation services.
According to Miu, NT-ISAC’s research shows that the percentage of layer 7 attacks have increased from single digits to nearly 30 percent. Miu also estimates DDoS attacks can cause businesses to lose up to US$100,000 per hour.
Most DDoS attacks today use bandwidth flooding and semantic-based attacks on the network or application layer—some even throw phishing and social engineering into the mix. Current mitigation strategies mainly use malicious bandwidth detection, network protocol analysis, CDN mitigation, black and white lists, and investigation and tracking. These techniques may quickly become insufficient for next-generation DDoS attacks.
In the “Universal DDoS Mitigation Bypass” briefing, NXG Labs will reveal the latest DDoS attack methods that threaten online commerce and services. Naturally, Nexusguard’s collaboration with NT-ISAC lead to a search for faster and more effective solutions. For more information, please visit http://www.nexusguard.com.
(1) For more information on the briefing’s agenda, please visit https://www.blackhat.com/us-13/schedule/briefings-31.html
(2) NT-ISAC: Members include DDoS defense veterans, scholars and lawyers who have extensive experience in securing information systems for financial institutes, governments, infrastructure and other critical industries. NT-ISAC’s latest project is to develop next-generation DDoS mitigation technologies, and has already developed an attack method that bypasses all current commercial DDoS mitigation products and services. Nexusguard Lab researcher Tony Miu will present the latest findings at Black Hat USA 2013.
###
About Nexusguard
Nexusguard is an industry-leading Internet security service provider, proven by years of experience mitigating thousands of attacks per month. Established in 2008, Nexusguard continues to provide innovative end-to-end, cloud-based Internet security solutions. By protecting clients against the ever-increasing and evolving multitude of Internet threats, Nexusguard's cloud-based security solutions empower clients around the globe with uninterrupted services. For more information, please visit http://www.nexusguard.com.
Twitter : http://twitter.com/NXG_PR
Facebook : http://www.facebook.com/NXG.PR
###
Press Contact :
Stanley Liu - Senior Marketing Executive, Hong Kong
+852-3526-0626
Ivy Wu - Marketing & PR Executive, Taiwan
+886-2-2659-8958
contact(at)nexusguard(dot)com
Ivy Wu, Nexusguard Limited, http://www.nexusguard.com, +886 2 26598958, [email protected]
Share this article