Distributed Denial-of-Service Prevention

Distributed Denial-of-Service Prevention

PUBLICATION OVERVIEW

More and more enterprises have moved their mission-critical services online. Competing in global markets driven by just-in-time demand, these enterprises rely on continuous uptime to perform business transactions on a 24/7/365 model. Distributed denial-of-service (DDoS) attacks are designed to limit access to these resources, and while they are not new, they are more effective today than ever before. The relative ease with which DDoS attacks can be launched, the diverse methods by which they can be executed, and the amount of damage that can be caused by a single attack make them a challenge to defend against.

As enterprises look to defend against DDoS attacks, they are turning to DDoS prevention solutions, which offer protection against the different categories of DDoS attacks, and which can take the form of on-premises devices or managed services. These solutions can be implemented as in-line devices (whether routing or transparent) or as out-of-band solutions capable of interacting with an existing routing and switching environment using industry-supported protocols (including routing protocols such as BGP). They must detect volumetric, protocol, and application attacks and should be able to scale quickly in order to continue processing and mitigating the large amount of traffic during a DDoS attack.

WHAT WE TESTED

Six leading DDoS prevention solutions were evaluated for security effectiveness, performance, and total cost of ownership (TCO). Of the six products tested, three received Recommended ratings. Overall Security Effectiveness ranged from 48.0 to 90.4%. The test focused on volumetric, protocol, and application DDoS attacks. Average protection against volumetric and protocol attacks ranged were 94.4% and 95.1% respectively, but average protection against application attacks was only 80%.

PRODUCT EVALUATED:

  • Arbor Networks APS 2800 v5.8.1
  • Corero SmartWall v8.10.248
  • F5 BIG-IP 10250v v12.0.0
  • Fortinet FortiDDoS 2000B v4.1.10
  • Huawei AntiDDoS8030 V500R001C00SPC600
  • Radware DefensePro 1006 v6.12.01

Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo.