www.prolexic.com

Q1 2014

Analysis and Emerging Trends

Compared to Q1 2013

• 47 percent increase in total DDoS attacks

• 9 percent decrease in average attack bandwidth

• 68 percent increase in infrastructure

• 21 percent decrease in application (Layer 7 attacks)

• 50 percent decrease in average attack duration

• 133 percent increase in average peak bandwidth Download the Q1 2014 Global DDoS Attack Report for supporting data and analysis

Peak bandwidth compared to Q1 2013

Figure 1: Peak bandwidth average (Q1 2014, Q4 2013, Q1 2013)

Packets per second compared to Q1 2013

Figure 2: Packets per second average (Q1 2014, Q4 2013, Q1 2013)

Distribution of DDoS attack vectors

Comparison of attack vectors since Q1 2013

• There has been a 13 percent decline in use of application attack vectors in Q1 2014 vs first quarter of 2013 (23 percent) – This reflects the increased power and ease of use of

infrastructure-based attacks.

• Application-level vectors require more skill and effort to build the botnet and coordinate the attack

• NTP was most frequently-used infrastructure based amplification attack (17 percent) – DNS (9 percent) and CHARGEN (3 percent) were also

popular

Attack vector popularity since Q1 2013

Total attacks per week (Q1 2014 vs. Q1 2013)

• There was a peak in total attacks from Feb. 12-18, a 191 percent increase compared to Q1 2013

• The surge was due to increase in CHARGEN and NTP attacks

• The highest volume of DDoS attacks per week occurred in Q1 2014 – 47 percent higher than attacks registered in any week

in Q1 2013

• The rise was attributed to a 68 percent increase in infrastructure attacks compared to Q1 2013

Q1 2014 Global Attack Report

• Download the Q1 2014 Global DDoS Attack Report

• The Q1 2014 report covers: – Analysis of recent DDoS attack trends

– Breakdown of average Gbps/Mpps statistics

– Year-over-year and quarter-by-quarter analysis

– Types and frequency of application layer attacks

– Types and frequency of infrastructure attacks

– Trends in attack frequency, size and sources

– Where and when DDoSers launch attacks

– Case study and analysis

About Prolexic

• Prolexic Technologies, now part of Akamai, has successfully stopped DDoS attacks for more than a decade

• Our global DDoS mitigation network and 24/7 security operations center (SOC) can stop even the largest attacks that exceed the capabilities of other DDoS mitigation service providers