{"id":307,"date":"2018-06-21T11:16:18","date_gmt":"2018-06-21T11:16:18","guid":{"rendered":"http:\/\/companies.mybroadband.co.za\/arbornetworks\/?p=307"},"modified":"2018-06-27T08:22:44","modified_gmt":"2018-06-27T08:22:44","slug":"netscout-arbor-fights-attacks-on-encrypted-services","status":"publish","type":"post","link":"https:\/\/companies.mybroadband.co.za\/arbornetworks\/2018\/06\/21\/netscout-arbor-fights-attacks-on-encrypted-services\/","title":{"rendered":"NETSCOUT Arbor fights attacks on encrypted services"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-311 size-full\" src=\"https:\/\/companies.mybroadband.co.za\/arbornetworks\/files\/2018\/06\/Code-computer.jpg\" alt=\"\" width=\"640\" height=\"430\" srcset=\"https:\/\/companies.mybroadband.co.za\/arbornetworks\/files\/2018\/06\/Code-computer.jpg 640w, https:\/\/companies.mybroadband.co.za\/arbornetworks\/files\/2018\/06\/Code-computer-300x202.jpg 300w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/p>\n<p><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">According to NETSCOUT Arbor\u2019s 13<sup>th<\/sup> Annual Worldwide Infrastructure Security Report (<\/span><a href=\"https:\/\/www.netscout.com\/report\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif; color: #0082bf;\"><strong>WISR<\/strong><\/span><\/a><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">), attacks targeting encrypted web services have becoming increasingly common. <\/span><\/p>\n<p><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">According to Bryan Hamman, territory manager for sub-Saharan Africa at NETSCOUT Arbor, which specialises in advanced Distributed Denial of Service (DDoS) protection solutions, encryption is a basic necessity in an organisation\u2019s cyber security defence arsenal. \u201cEncryption is the way in which plaintext or any other type of data is converted from a readable form to an encoded version that can only be decoded by another entity if they have access to a decryption key. Encryption is a tremendously important method for providing data security, especially for end-to-end protection of data transmitted across networks.<\/span><\/p>\n<p><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">\u201cFor example, encryption allows banks to offer online banking and funds transfers, and protects the public\u2019s online interactions when they use their credit or debit cards, or interact with any service provider for an online transaction that involves the exchange of information. Breaking web service encryption of such online data stores, which house confidential personal and financial data, is therefore a serious goal for cyber attackers, and, according to the most recent NETSCOUT Arbor WISR, attacks targeting encrypted web services in recent years are becoming more common. Using a DDoS attack is one method of carrying out such an assault on data.\u201d<\/span><\/p>\n<p><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">A DDoS attack is an attempt to make an online service unavailable by overwhelming it with traffic from multiple sources. In recent years, DDoS attacks have become a major cyber-security issue for CIOs and CSOs, as each year these attacks grow in number, becoming bigger and more damaging. Just a few months ago, NETSCOUT Arbor defences were able to foil \u2013 on behalf of its clients \u2013 two of the biggest DDoS attacks in history. <\/span><\/p>\n<p><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">Hamman notes, \u201cOn 28 February, a 1.3Tbps DDoS attack was confirmed against developer platform GitHub, which was unavailable from 17:21 to 17:26 UTC, and intermittently unavailable from 17:26 to 17:30 UTC, due to the attack. However, no data was lost. This was then the most powerful DDoS attack recorded to date. Hot on its heels though, just days later in early March, an even larger attack of 1.7Tbps \u2013 a reflection\/amplification attack \u2013 was targeted at a customer of an American-based service provider and recorded by the NETSCOUT Arbor ATLAS global traffic and DDoS threat data system. Again, the attack was unsuccessful.\u201d <\/span><\/p>\n<p><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">With reference to a <\/span><strong><a href=\"https:\/\/techspective.net\/2018\/04\/24\/attacks-on-encrypted-services\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif; color: #0082bf;\">recent article from Tom Bienkowski<\/span><\/a><\/strong><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">, director of DDoS Product Marketing at NETSCOUT Arbor, Hamman clarifies that there are four key types of DDoS attacks that target encrypted services: <\/span><\/p>\n<ul>\n<li><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">Attacks that target the SSL\/TLS negotiation, which determines how two parties to an internet connection will encrypt their communications.<\/span><\/li>\n<li><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">Protocol or connection attacks against SSL service ports.<\/span><\/li>\n<li><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">Volumetric attacks targeting SSL\/TLS service ports, which overwhelm port capacity with high volume traffic floods.<\/span><\/li>\n<li><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">Application-layer attacks against underlying services running over SSL\/TLS.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">Hamman says that against such grimly determined tactics, a multi-layered defensive strategy is required in turn. NETSCOUT Arbor\u2019s DDoS defence approach incorporates the following key strategies:<\/span><\/p>\n<ul>\n<li><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">Arbor Cloud and 24\/7 Security Operations Centre, which detects and mitigates volumetric attacks upstream before hitting the organisation.<\/span><\/li>\n<li><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">Arbor APS, which stops \u2018low and slow\u2019 application layer attacks.<\/span><\/li>\n<li><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">Arbor Cloud Signaling\u2122, which intelligently routes traffic to secure clouds, thereby preventing on-premise infrastructure protection from being overwhelmed.<\/span><\/li>\n<li><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">Arbor ATLAS Intelligence Feed, which sends continual alerts to security teams to inform them of developing threats and trends.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">Bienkowski concludes, \u201cA key component of the security arsenal is the ability to inspect encrypted traffic securely and attest to its authenticity without slowing, disrupting or compromising legitimate traffic. While decryption is not always necessary for successful mitigation, there is a growing need for scalable solutions for decrypting packets. <\/span><\/p>\n<p><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">\u201cOne positive conclusion coming out of the 13<sup>th<\/sup> WISR is that both service providers and enterprises are recognising that traditional firewalls and intrusion prevention systems are insufficient in confronting sophisticated DDoS attacks \u2013 particularly encrypted attacks targeting encrypted services. Encryption is essential but cannot be relied upon on its own to thwart determined and sophisticated attackers.\u201d <\/span><\/p>\n<p><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">For more information about NETSCOUT Arbor in Africa, please contact Bryan Hamman at <\/span><strong><a href=\"mailto:bhamman@arbor.net\" target=\"_blank\" rel=\"noopener\"><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">bhamman@arbor.net<\/span><\/a><\/strong><span style=\"font-size: 10.0pt; font-family: 'Arial',sans-serif;\">.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Attacks targeting encrypted web services have becoming increasingly common.<\/p>\n","protected":false},"author":1,"featured_media":311,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-307","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/companies.mybroadband.co.za\/arbornetworks\/wp-json\/wp\/v2\/posts\/307","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/companies.mybroadband.co.za\/arbornetworks\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/companies.mybroadband.co.za\/arbornetworks\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/companies.mybroadband.co.za\/arbornetworks\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/companies.mybroadband.co.za\/arbornetworks\/wp-json\/wp\/v2\/comments?post=307"}],"version-history":[{"count":4,"href":"https:\/\/companies.mybroadband.co.za\/arbornetworks\/wp-json\/wp\/v2\/posts\/307\/revisions"}],"predecessor-version":[{"id":317,"href":"https:\/\/companies.mybroadband.co.za\/arbornetworks\/wp-json\/wp\/v2\/posts\/307\/revisions\/317"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/companies.mybroadband.co.za\/arbornetworks\/wp-json\/wp\/v2\/media\/311"}],"wp:attachment":[{"href":"https:\/\/companies.mybroadband.co.za\/arbornetworks\/wp-json\/wp\/v2\/media?parent=307"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/companies.mybroadband.co.za\/arbornetworks\/wp-json\/wp\/v2\/categories?post=307"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/companies.mybroadband.co.za\/arbornetworks\/wp-json\/wp\/v2\/tags?post=307"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}