Buisness DoS attack Mitigation

Today, with the internet being the center of our business and academic world, there are more opportunities for attacks than ever before. As of 2013, cybercrime increased by 78%, of which 55% of the crime had to do with DDoS (Distributed Denial of Service) attacks (Karnes, 2020). The increase in cybercrimes should be no surprise as our entire world is now centered around the internet. DDoS attacks are not just a nuisance but can cause devastating effects on companies and financial institutions. However, how can a company or organization protect itself from these disastrous effects? One of the biggest things a company can do is have an IR Incident response plan) in place for such incidents. Taking the time to create A CSIRT team and coming up with a solid plan can potentially save the company thousands of dollars. CSIRT teams can be an investment, but the company should keep in mind that when they are constantly victims of cyber-attacks (DoS), they can potentially lose customers as they lose their trust (Karnes, 2020).

There are several steps of preparing for a cyber-attack, such as DoS or DDoS, such as knowing one's enemy and, for example, knowing what kind of DoS attack is being used. Is it a Smurf attack where the server is being hit by ICMP (Internet Control Message Protocol Packets) from a spoofed address, or is it an SYN flood attack where the target server does not complete the three-way-handshake. The company should have a team with varying skills in different areas, with staff continuously trained regarding threats. Additionally, the company should consider using a third-party DoS protection system and ensure that anti-virus and anti-malware are up to date and doing regular scans. Furthermore, the companies must have a recovery plan, including written mitigations (Cyber Security & Infrastructure Security Agency,2009).

The National Cyber Security Centre suggests that companies take the following steps to protect their assets, confirm the company is under attack, understand the nature of the attack (This is when the company starts catching packets to have more of a clear picture of what is happening). Deploy the mitigation that has been written in the incident response plan and follow up with monitoring and following the recovery plan in place (National Cyber Security Centre, n.d.).

As mentioned before, the proper people with the appropriate skill set must be in place. The analyst should look at log entries, CPU usage, bandwidth and decide the best way to mitigate such degrading services if possible. While monitoring the attack, it is essential to note that most attacks (around 90%) do not last longer than three hours. Therefore, though it may be costly if the attack persists, it may be beneficial to get a third-party mitigator involved. If this is the case, be sure to pick a well-known, creditable service with highly skilled personal (National Cyber Security Centre, n.d.).

In Conclusion, there are five best practices a company should initiate when under a cyber security threat such as a DoS attack. First, they should have a third-party company readily accessible, so if the attack is too big for their CSIRT team to handle, they will still be able to control it. They should ensure an upstream defense and make sure that the providers can deal with aggression in surges, known as scaling. They should have a response plan written out. The goal should be detailed and rehearsed, and she is written to where the company can still function at some compacity during the attack. Finally, the network should continuously be monitored and tested (National Cyber Security Centre, n.d.)



References:

Cybersecurity & Infrastructure Security Agency. (2009, November 4). Understanding Denial-of-Service Attacks | CISA. https://us-cert.cisa.gov/ncas/tips/ST04-015

Karnes, M. (2020, July 22). What Is the Best Way to Respond to a DDoS Attack? Security Intelligence. https://securityintelligence.com/ddos-attack-response-plan/

National Cyber Security Centre. (n.d.). A minimal Denial of Service (DoS) response plan. Retrieved September 25, 2021, from https://www.ncsc.gov.uk/collection/denial-service-dos-guidance-collection/a-minimal-denial-of-service-response-plan

National Cyber Security Centre. (n.d.). Preparing for denial of service (DoS) attacks. Retrieved September 25, 2021, from https://www.ncsc.gov.uk/collection/denial-service-dos-guidance-collection/preparing-denial-service-dos-attacks1




Comments

Post a Comment

Popular posts from this blog

Gangs and Differential Association Theory

  Abstract  Gangs are feared around the United States and are something that attracts youth. People in gangs are not merely born violent individuals but learn the behavior to become violent gang members due to the structural environment that these individuals live in. This article discusses gangs, the location of gangs, and the structural environment. It also discusses how differential association theory relates to gangs and their activity. Furthermore, it discusses policies that are in place to prevent gang activity and how differential theory affects these policies.   Gangs and Differential Theory  In the United States, one cannot go a day without seeing something about gangs on TV. Sometimes it is something that one sees on the news. Other times it is a favorite show that glamorizes criminal activity. Either way, gangs have become part of the American culture today. Gangs are a brutal force that should not be reckoned with, and they are rightfully feared by many d...
Read more

Using Technology to Combat Human Trafficking

  Using Technology to Combat Human Trafficking Jennifer Barnard Wilmington University Abstract  When it comes to human trafficking, there are several practitioners involved with combating this heinous crime. Most often, practitioners are thought of as law enforcement, lawyers, government officials, and advocates; however, human trafficking is happening more online. Often data analysis is overlooked as practitioners. However, those with a passion for fighting human trafficking are just as vital as other practitioners. This article discusses what a Human trafficking data analysis does, the challenges they face, and the skills they need to do this job. Though they are not directly in contact with the victims, they play a vital role in combating human trafficking.      Human trafficking is a global problem that takes a variety of practitioners to combat. When thinking of those who combat human trafficking, one thinks of law enforcement, advocacies, and the governme...
Read more

Behavior Influenced by Environmental and Social Factors

                                          Behaviors Influenced by Environmental and Social Factors                                                           Jennifer Silvius                                                        Wilmington University                                                              Abstract:  In this scenario, an eight-year-old child displays problematic behaviors in school by fighting, not pay...
Read more