A10 Networks has published a report with IDG Connect, “DDoS: A Clear and Ever Present Danger.” The report, which surveyed 120 IT decision makers at large organisations, finds businesses locked in combat with a growing army of online attackers. It finds that the average company suffers 15 DDoS attacks per year, with average attacks causing 17 hours of effective downtime, including slowdowns, denied customer access or crashes.
As DDoS attacks become more popular, they are also growing harder to defend. While the average peak bandwidth of attacks was a staggering 30-40 gigabits per second (Gbps), 59 per cent of organisations have experienced an attack over 40 Gbps. A majority of respondents (77 per cent) also expect sophisticated multi-vector attacks to pose the most dangerous type of DDoS attack in the future.
Businesses are fighting back. More than half of the surveyed organisations said they planned to increase their DDoS prevention budgets in the next six months. IT security teams are the most likely to lead DDoS prevention efforts (36 per cent), followed closely by the chief security officers (26 per cent) and the CIO (26 per cent).
“DDoS attacks are called ‘sudden death’ for good reason,” said Raj Jalan, CTO of A10 Networks. “If left unaddressed, the costs will include lost business, time-to-service restoration and a decline in customer satisfaction. The good news is our findings show that security teams are making DDoS prevention a top priority. With a better threat prevention system, they can turn an urgent business threat into an FYI-level notification.”
Key report findings include:
- The typical company was hit by an average of 15 DDoS attacks per year, with larger organisations experiencing more.
- One in five companies reported effective downtimes of over 36 hours, with the average attack resulting 17 hours.
- 33 per cent of respondents reported DDoS attacks over 40 Gbps, with the most common attacks including UDP Flood (23per cent), Slow Post/Slowloris (16 per cent) and SYN Flood (14 per cent).
- 77 per cent believe multi-vector attacks, which include volumetric and application layer attacks, will be the most dangerous in the future.
- Over half of the respondents plan to increase their DDoS budgets in the next six months (54 per cent).
- 53 per cent of respondents say that on-premise protection is required to be the most effective solution to address a multi-vector DDoS threat, either “hybrid” protection (34per cent), or an on premise appliance only solution (19per cent).
