[Q4 2014]
akamai.com
= compared to [Q 3 2014]
• 90% increase in total DDoS attacks • 54% decrease in average attack bandwidth
• 121% increase in infrastructure layer attacks • 16% decrease in application (Layer 7) attacks
• 31% increase in average attack duration • 38% increase in multi-vector attacks [Download the Q4 2014 Global DDoS Attack Report for supporting data and analysis]
2 / [The State of the Internet] / Security (Q4 2014)
= multi-vector campaigns compared to [Q 4 2013]
60 50
53.26 46.24
44.14
40 30 20 10 0 Q4 2013
Q3 2014
Q4 2014
Figure 1: While the number of multi-vector attacks has surged the past two quarters, the percentage of multivector campaigns has continued to hover around the 50 percent mark
3 / [The State of the Internet] / Security (Q4 2014)
= peak bandwidth compared to [Q 4 2013]
16 14 12 10 8 6 4 2 0
13.93
6.41
4.21
Q4 2013
Q3 2014
Q4 2014
Figure 2: Average peak bandwidth has dropped since last quarter, but remains higher than it was a year ago
4 / [The State of the Internet] / Security (Q4 2014)
= distribution of DDoS attack vectors
Figure 3: Infrastructure attacks remained popular in Q4, making up nearly 90 percent of all attack vectors
5 / [The State of the Internet] / Security (Q4 2014)
= comparison of attack vectors since Q 4 [2013] • In late November 2014, a new attack vector, XMAS-DDoS with Christmas tree packets, was observed for the first time. / This vector is featured in the Attack Spotlight of the Q4 2014 Security Report.
• Compared to Q3, SSDP accounted for a significant 214 percent increase in number of attacks / SSDP was a newly observed attack in Q3
/ In Q4 2014, Akamai mitigated a 106 Gpbs SSDP-only DDoS attack
• NTP reflection increased by 181 percent compared to Q3, an indicator of the larger number of DDoS attacks overall in Q4 / DDoS-for-hire sites, a market with growing momentum, were a source for NTP reflection attacks this quarter
6 / [The State of the Internet] / Security (Q4 2014)
= targeted industries
Figure 4: The gaming industry bore the brunt of DDoS attacks in Q4, driven by a surge in attack activity at the end of December
7 / [The State of the Internet] / Security (Q4 2014)
= total attacks per week [Q 4 2014 vs Q 4 2013]
Figure 5: Weekly DDoS attacks surged in December 2014 compared to December 2013, fueled by attacks in the gaming industry
8 / [The State of the Internet] / Security (Q4 2014)
= Q 4 2014 global attack report • Download the Q4 2014 State of the Internet Security Report • The Q4 2014 report covers: / Analysis of DDoS attack trends / Breakdown of average Gbps/Mbps statistics / Year-over-year and quarter-by-quarter analysis / Types and frequency of application-layer attacks / Types and frequency of infrastructure attacks / Trends in attack frequency, size and sources / Where and when DDoSers launch attacks / Case study and analysis
9 / [The State of the Internet] / Security (Q4 2014)
= about stateoftheinternet.com
• StateoftheInternet.com, brought to you by Akamai, serves as the home for content and information intended to provide an informed view into online
connectivity and cybersecurity trends as well as related metrics, including Internet connection speeds, broadband adoption, mobile usage, outages, and cyber-attacks and threats. • Visitors to www.stateoftheinternet.com can find current and archived versions of Akamai’s State of the Internet (Connectivity and Security) reports, the company’s data visualizations, and other resources designed to put context around the ever-changing Internet landscape.
10 / [The State of the Internet] / Security (Q4 2014)