How pervasive have DDoS attacks become? According to research from the global network services company BT Global Services, two out of every five organizations worldwide were targeted by DDoS attacks last year. That's the global average. In the United States, more than half (58%) of all organizations were targeted. Those aren't good odds.
With so many companies becoming victims, more than half of IT decision makers around the world think that DDoS attacks are becoming increasingly effective at subverting IT security measures. In fact, they are. Of the attacks in the U.S., three-quarters of them were multi-vector attacks which typically use combinations of volumetric, resource depletion, state exhaustion, and application layer attack vectors. Multi-vector attacks are inherently more difficult to defend against.
40% of IT decision makers aren't confident that their organization is prepared to effectively counter a DDoS attack. Some of the factors behind this assessment are that organizations don't allocate sufficient resources toward anti-DDoS measures, and many companies don't have the right resources in place. For example, a next generation firewall is likely to have some anti-DDoS capabilities that will allow it to defend against some types of attacks, but organizations that get hit with a multi-vector attack really need an intelligent DDoS mitigation solution that is designed to detect and mitigate attacks that utilize multiple techniques.
Further findings of the BT DDoS research:
- Organizations take 12 hours, on average, to recover from a DDoS attack. Two-thirds of IT decision makers say their systems were down for more than 6 hours before returning to full working capacity. In extreme cases, some organizations report being offline for up to a week.
- In the U.S., 38% of IT decision makers say their company CEO has a good level of understanding of what a DDoS attack is and the risk that such an attack poses to the organization. Clearly there is a need to educate the high level executives on the impact an attack can have on their business.
- 96% of those surveyed whose company had suffered a DDoS attack say they experienced an increase in customer complaints when their network systems went down during an attack.
It's clear that DDoS attacks are growing in frequency, size and impact. Where does your company stand on preparedness?