info@businessghana.com
Global and local legislation imposes severe penalties for firms that fail to protect their networks from DDoS attacks.
Over recent years, distributed denial of service (DDoS) attacks have become one of the biggest cyber-security headaches for CIOs and CSOs. Each year, these attacks grow in numbers, becoming bigger and more damaging.
Previously, the primary DDoS fears were the business disruption and reputational damage that they caused. DDoS attackers harness the power of thousands (sometimes even millions) of devices – each ‘hijacked’ with malicious software – to flood the servers of their targets, and bring down their online systems.
But now, the introduction of new legislation is raising the stakes even further, propelling the issue of DDoS attacks to the top of boardroom agendas. The European Union’s General Data Protection Regulation (GDPR) came into force on 25 May, likely to be followed soon by the enforcement of South Africa’s equivalent to this legislation, the Protection of Personal Information (PoPI) Act.
Both sets of legislation aim to protect consumers’ personal information, imposing rigorous laws on how organisations gather and use personal data, increasing levels of transparency, giving individuals greater control over how their data is used, and ensuring mandatory disclosure of any breaches.
Specific reference to DDoS
Bryan Hamman, territory manager for sub-Saharan Africa at Arbor Networks, which specialises in advanced DDoS protection solutions, explains that the new PoPI Act draws heavily on the intent and construct of Europe’s GDPR.
“As our local legislation evolves and formalises, it’s instructive for local firms to look at GDPR as the benchmark to achieve international compliance standards. Most legal opinion suggests that if an organisation is in full compliance with GDPR, then it will automatically ensure compliance with PoPI.”
Under the new GDPR legislation, organisations that operate in Europe or do any business with European citizens must take stringent measures to protect the availability of their network, and secure the data that it carries, among many other compliance considerations.
While most of the GDPR headlines tend to highlight the crippling fines that companies could face (up to 20 million euros or four percent of annual turnover) if they are found in violation, Hamman says one of the less-understood provisions relates to network availability.
In fact, article 32 of the regulations specifically refers to ‘the ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services’ and the ‘ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident.’
In recital 49, the regulations go on to specifically refer to denial of service attacks, which Hamman believes shows the importance of organisations protecting themselves from this type of attack, as part of an orchestrated end-to-end security strategy.
“Though DDoS attacks have been on the rise, their explicit reference in GDPR illustrates how important they have become to security professionals and regulators alike,” says Hamman. “The network is the lifeblood of the modern organisation, and any threats are treated extremely seriously by lawmakers.”
Here to stay
Staying in-line with new legislation while combating increasingly sophisticated DDoS attacks is a tough ask for security pros, he adds. “Modern DDoS attacks have evolved a long way from their origins, now often interlacing volumetric, TCP state exhaustion and application layer attack vectors.”
“This type of complex attack renders standard defences - like firewalls, WAFs, load balancers, and IPS/IDSs – almost completely useless against DDoS onslaughts.
“Companies must place a concerted focus specifically on DDoS, with layered, intelligently automated protection strategies that harness the latest technologies to provide instant warning of any new attacks.”
He highlights four key pillars to Arbor’s DDoS defence approach:
“The reality is that DDoS attacks are here to stay, and there is no ‘silver bullet’ that can eradicate the industry of this scourge, once and for all. Anyone with an internet connection, some cash to burn, and a grudge to bear, can theoretically launch an attack against your organisation.
“In fact, considering the new regulation’s emphasis on network protection, hackers may well intensify their DDoS efforts, in an effort to cause even more chaos and damage to their victims, which are now liable for hefty regulatory fines,” Hamman warns.
For more information about Arbor in Africa, please contact Bryan Hamman at bhamman@arbor.net.
About Arbor Networks
Arbor Networks, the security division of NETSCOUT, helps secure the world’s largest enterprise and service provider networks from DDoS attacks and advanced threats. Arbor is the world’s leading provider of DDoS protection in the enterprise, carrier and mobile market segments, according to Infonetics Research. Arbor’s advanced threat solutions deliver complete network visibility through a combination of packet capture and NetFlow technology, enabling the rapid detection and mitigation of malware and malicious insiders. Arbor also delivers market-leading analytics for dynamic incident response, historical analysis, visualization and forensics. Arbor strives to be a “force multiplier,” making network and security teams the experts. Our goal is to provide a richer picture into networks and more security context so customers can solve problems faster and reduce the risks to their business.
To learn more about Arbor products and services, please follow us on Twitter @ArborNetworks. Arbor’s research, analysis and insight, together with data from the ATLAS global threat intelligence system, can be found at the ATLAS Threat Portal.
Trademark Notice: Arbor Networks, the Arbor Networks logo and ATLAS are all trademarks of Arbor Networks, Inc. All other brands may be the trademarks of their respective owners.
