{"id":42439,"date":"2016-07-20T04:00:00","date_gmt":"2016-07-20T08:00:00","guid":{"rendered":"https:\/\/www.cira.ca\/blog\/infographic-dns-under-attack-2\/"},"modified":"2023-03-10T10:57:43","modified_gmt":"2023-03-10T15:57:43","slug":"infographic-dns-under-attack-2","status":"publish","type":"cira_news","link":"https:\/\/stg-saas.cira.ca\/fr\/ressources\/nouvelles\/cybersecurity-fr\/infographic-dns-under-attack-2\/","title":{"rendered":"Infographic \u2013DNS under attack"},"content":{"rendered":"<p>Some of the best information from analyst and vendor whitepapers to help you build your case for DNS investment.\u00a0<\/p>\n<p><!--more--><\/p>\n<p>Today anyone can launch a DDoS attack with $20 using a credit card number they stole with any number of stressor tools. In response\u00a0organizations are doing a better job of defending themselves with increasingly sophisticated solutions. If you are in network IT management and subscribe to any number of e-zines and groups, then\u00a0you probably can&#8217;t get through a day without receiving messages from a half-dozen security vendors. There are lots of security solutions because there is lots of organizational investment in that technology category. As a provider of a secondary DNS service we have heard a few networking people tell us, \u201cGo talk to the security guys because\u00a0they have all of the budget and mine keeps getting reduced.\u201d\u00a0<\/p>\n<p>With that in mind we wanted to help the DNS guys by providing some key facts on optimizing and protecting the DNS. This infographic compiles some of the best information from analyst and vendor whitepapers to help you build your case for DNS investment.\u00a0All of the facts are cited in the infographic if you want to do more reading from the original sources. For a PDF version please see the <a href=\"https:\/\/static.cira.ca\/sites\/default\/files\/public\/CIRADNS-Under-Attack-graphic.pdf\">DNS Under Attack Infographic<\/a>.<\/p>\n<\/p>\n<div class=\"media media-element-container media-default\"><img loading=\"lazy\" decoding=\"async\" alt=\"Page one of the DNS Under Attack infographic\" title=\"The DNS under attack infographic\" height=\"1224\" width=\"792\" style=\"width: 792px;height: 1224px;border-width: 1px;border-style: solid\" class=\"media-element file-default\" src=\"https:\/\/static.cira.ca\/sites\/default\/files\/public\/CIRADNS-Under-Attack-1.jpg\" \/><\/div>\n<p>Starting with the top line, we have an 85% increase in overall DDoS attacks in 2016 and this includes a 169% increase in attacks at the infrastructure layer. This surprised us because the application layer is still often the more effective way to launch a successful attack. We surmise that the big jump in infrastructure attacks is because they are relatively easy to execute.\u00a0This makes sense since 56% of all attacks are multi-vector.\u00a0In other words it seems that if infrastructure is easy and cheap to attack then the bad actor might as well add it to cover the tracks of a more sinister objective. \u00a0<\/p>\n<p>Now on to the DNS. Arbor Networks reported that\u00a084% of IT managers reported that their DNS was used in an amplification attack. Strangely, only 34% saw attacks <strong><u>on<\/u><\/strong> their DNS. It is our view that the first number, while not the direct target the attack is still an abuse of your DNS and being an unwitting accomplice is every bit as bad as being a victim \u2014but we are perfectionists about the DNS.<\/p>\n<\/p>\n<div class=\"media media-element-container media-default\"><img loading=\"lazy\" decoding=\"async\" alt=\"Page 2 of the DNS under attack infographic\" title=\"The DNS under attack facts and figures\" height=\"1224\" width=\"792\" style=\"width: 792px;height: 1224px;border-width: 1px;border-style: solid\" class=\"media-element file-default\" src=\"https:\/\/static.cira.ca\/sites\/default\/files\/public\/CIRADNS-Under-Attack-2.jpg\" \/><\/div>\n<p>And finally, the most salient piece of information was that 39% of organizations require 10+ people to respond to an attack. So if you manage the DNS and are looking for a reason to invest in that infrastructure then look no further than adding up the amount of time and number of meetings your team has to sit through before, during and after a problem happens. And remember this is just based on attacks, the DNS is still exposed to application, hardware, and network outages.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Some of the best information from analyst and vendor whitepapers to help you build your case for DNS investment.\u00a0<\/p>\n","protected":false},"featured_media":2509,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"ngg_post_thumbnail":0,"slim_seo":{"title":"Infographic \u2013DNS under attack - CIRA","description":"Some of the best information from analyst and vendor whitepapers to help you build your case for DNS investment.\u00a0 Today anyone can launch a DDoS attack with $20"},"footnotes":""},"topic":[1066],"class_list":["post-42439","cira_news","type-cira_news","status-publish","has-post-thumbnail","hentry","cira_news_type-cira-news-type-blogue","cira_topic-cira-topic-cybersecurity-fr","cira_author-robwilliamson-fr"],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/stg-saas.cira.ca\/fr\/wp-json\/cira\/v1\/news\/42439","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/stg-saas.cira.ca\/fr\/wp-json\/cira\/v1\/news"}],"about":[{"href":"https:\/\/stg-saas.cira.ca\/fr\/wp-json\/wp\/v2\/types\/cira_news"}],"version-history":[{"count":0,"href":"https:\/\/stg-saas.cira.ca\/fr\/wp-json\/cira\/v1\/news\/42439\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/stg-saas.cira.ca\/fr\/wp-json\/wp\/v2\/media\/2509"}],"wp:attachment":[{"href":"https:\/\/stg-saas.cira.ca\/fr\/wp-json\/wp\/v2\/media?parent=42439"}],"wp:term":[{"taxonomy":"cira_topic","embeddable":true,"href":"https:\/\/stg-saas.cira.ca\/fr\/wp-json\/cira\/v1\/topic?post=42439"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}