Connect with us

E-Business

20 Years of DDoS Attacks – Looking Back, Looking Forward

Published

on

Kindly share this post

Distributed Denial of Service (DDoS) attacks are more popular and dangerous today than at any time in history.

In 20 years, DDoS attacks have gone from being a novelty to a nuisance, and finally today they represent a serious threat against the availability and functionality of websites, online services and applications.

This is according to Bryan Hamman, Arbor Network’s territory manager for Sub-Saharan Africa, who says, “Easy-to-use tools and cheap attack services have widened the potential net that DDoS attacks can cast.  Today, anyone with a grievance and an Internet connection can launch an attack. If we take a look back about 20 years or so, historic news headlines and the increasing size of attacks through the years indicate that this problem isn’t going to go away.”

Looking back at some of the attacks down the years
·        1996: Internet service provider (ISP) PANIX is struck by a sustained DDoS attack, affecting businesses that use Panix as their ISP.

·        1996: CERT/ CC – the Computer Emergency Response Team/ Coordination Center, a government-funded research and development centre based at Carnegie Mellon University in Pittsburgh – releases an advisory on the growing phenomenon of TCP SYN floods using spoofed source IP addresses.

·        1997: The world sees the arrival of early DDoS tools, such as Trinoo, Tribe Flood Network, TFN2K, Shaft, and others, often coded by their authors. Primitive DDoS networks emerge, using IRC and Eggdrop or the Sub7 Trojan.

·        1998: The document RFC 2267 is published, which details how network administrators can defeat DDoS attacks via anti-spoofing measures. This document eventually becomes a best current practice adopted by many networking vendors.

·        1998: The Smurf Amplifier Registry is launched to help discover and disable “Smurf” amplifiers, which are abused in DDoS attacks. Smurf Attacks use a spoofed broadcast ICMP ping to then reflect back to a victim to create the attack traffic. By 2012 over 193,000 networks have been found and fixed.

·        1998: Michael Calce, aka 15-year-old ‘Mafiaboy’, launches sustained DDoS attacks on multiple major eCommerce sites including Amazon, CNN, Dell, E*Trade, eBay, and Yahoo!. At the time, Yahoo! was the biggest search engine in the world. He is investigated by the FBI. The Montreal Youth Court sentenced him on September 12, 2001, to eight months of “open custody”, one year of probation, restricted use of the Internet, and a small fine.

·        2002: Significant “Smurf” attacks strike the root DNS servers and cause some outages for some sites. The attacks are eventually repelled. Total traffic eventually hits 900 Mbps.

·        2007: The former Soviet republic of Estonia is hit with sustained DDoS attacks following diplomatic tensions with Russia. The issues arise after Estonia moves a statue honouring Soviet forces who served in World War II against Nazi Germany.

·        2008: Russia is accused of attacking Georgian government websites in a cyber war to accompany its military bombardment, weeks before the invasion of the disputed territory of South Ossetia by Russian troops.

·        2008: Project Chanology is launched by members of “Anonymous”, a leaderless Internet-based group, in response to the Church of Scientology trying to remove an infamous Tom Cruise interview video from the Internet. Project Chanology used DDoS as part of its measures to try to disrupt the Church of Scientology’s operations.

·        2011: Members of Anonymous launch attacks against the sites of PayPal, Visa, and MasterCard in 2011 after the payment service providers refused to process financial donations intended for WikiLeaks.

·        2011: A DDoS attack on Sony is proportedly used to block the detection of a data breach that leads to the extraction of millions of customer records for PlayStation Network users.

·        2011 to 2012: Between December 2011 and March 2012, against a background of political tension in Russia including presidential elections, which were fraught with political demonstrations, DDoS attacks enter the political landscape, with DDoS attacks on both opposition as well as pro-government sites. The world sees Russian cybercriminal methods being used for political ends.

·        2012: Similarly, although arguably not so widely, DDoS attacks are used for political reasons when Canada’s New Democrat Party sees its leadership election negatively affected by a DDoS attack that delays voting and reduced turnout.

·        2012: Unknown groups hit various US and UK government-related websites in protest at these governments’ Wikileaks position.

·        2013: FBI says more cooperation with banks is key in probing cyberattacks.

·        2013: Largest attack reaches 300Gbps – Dutch anti-spam website Spamhaus is targeted for naming and blacklisting cybercrime hosting enterprises, spam and botnet operations.

·        2014: PlayStation Network and Xbox Live are attacked on Christmas Day.

·        2014: In Hong Kong, a huge attack is carried out against the territory’s pro-democracy websites. While many assumed that the culprit would have been the Chinese government, this is not necessarily certain. The attacker could, however, be someone who is not sympathetic with the Hong Kong democracy movement, or someone trying to make the Chinese government look bad.

·        2015: The Turkish Internet is hit with a massive DDoS attack, which came in the wake of Turkey shooting down a Russian military aircraft.

·        2015: British phone and broadband provider, TalkTalk, which has over four million UK customers, is hit by a DDoS attack, which is used as a smokescreen while customers’ personal information is stolen.

·        2015: On New Year’s Eve of 2015, the BBC’s entire domain, including its on-demand television and radio player, is down for three hours and continues to have issues for the rest of the day. The attack is claimed by a group called the “New World Hackers”.

·        2016: An IoT botnet targets a major international event with sophisticated, large-scale DDoS attacks sustaining 500 gb/sec in attack traffic for the duration of the event.

·        2016: The Mirai IoT botnet launches 1Tbps multi vector DDoS attack against DNS infrastructure, taking many of the world’s most popular websites offline.

Looking forward – where to from here?
Hamman says, “We can see clearly, when we look at the timeline of some of the most prominent DDoS attacks over the past two decades, that perpetrators launch these attacks for a variety of reasons. They can be hackers who want to make a statement, as in the case of Mafiaboy; governments of countries at war using cyberwarfare tactics as part of their general arsenal; and criminals trying to blackmail online businesses. 

“There are also examples when cyber activists show displeasure against their targets, such as the 2011 attacks by members of Anonymous against the sites of PayPal, Visa and MasterCard, and the 2013 attacks against Spamhaus. The online gaming industry has also been targeted, with the blame generally going to disgruntled players or even competitors. We’ve also seen instances when DDoS attacks are used as a smokescreen to camouflage or draw attention away from other criminal activity an attacker might be doing, such as stealing data from the victim’s network, as in the 2015 example of the UK telecom TalkTalk last year.

Hamman says the IoT brings new demands and requirements to DDoS protection. He adds, “The Mirai IoT botnet reminds us that manufacturers and vendors also have a growing responsibility with respect to their technology and how it will be applied in diverse environments. They need to test for and consider the potential for exploitation. Ideally, all devices should be assessed for risk at the manufacturer and then again by those who are responsible for selling/ implementing them in enterprises.”

Hamman concludes, “Previously, it used to be that only certain types of business would be likely targets for a DDoS attack, with finance, gaming and e-commerce at the top of the list. Today, any business, for any reason, can become a target of a DDoS attack. A number of DDoS-for-hire services, for example, will take down a competitor’s website for any business that wants to hire them.

“The only answer, therefore, is to ensure you are protected. Arbor provides the industry’s most comprehensive suite of DDoS attack protection products and services for the enterprise, cloud/ hosting and service provider markets, with the required deployment model, scalability and pricing flexibility to meet the DDoS protection needs of any organisation operating online today.”


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

Confronting the Google Monolith: Survival Strategies for Online Businesses

Published

on

Kindly share this post

By Reuben Kalu.

In the vast expanse of the digital realm, Google looms large, an omnipresent force shaping the way we navigate, search, and conduct business online.

From its humble beginnings as a search engine to its current status as a multifaceted tech behemoth, Google has entrenched itself deeply into the fabric of the internet.

Its influence is undeniable, its reach unparalleled, and its ubiquity seemingly inescapable. But can you truly run an online business without Google?

The answer, in today’s digital landscape, is a resounding no. You have no choice.

Google’s dominance extends across multiple facets of the online world, making it virtually impossible for businesses to thrive without engaging with its ecosystem.

From search engine optimization (SEO) to online advertising, email services to analytics, Google’s suite of products and services permeates every aspect of the online business landscape.

Attempting to operate without Google is akin to swimming against a relentless tide, fighting an uphill battle fraught with obstacles and limitations.

At the heart of Google’s influence lies its search engine, the gateway through which billions of internet users navigate the vast expanse of online content. .

Google’s search algorithms wield immense power, determining which websites rank prominently in search results and which languish in obscurity.

For businesses seeking to attract organic traffic and expand their online presence, optimizing for Google’s search algorithms is not merely advisable—it’s imperative.

But Google’s influence extends far beyond search. Consider Google Ads, the company’s advertising platform that enables businesses to reach targeted audiences through paid search, display, and video advertising.

With billions of searches conducted on Google each day, Google Ads provides unparalleled reach and visibility, allowing businesses to target potential customers with pinpoint accuracy.

Attempting to compete in the online advertising arena without leveraging Google Ads is akin to entering a battle unarmed—a futile endeavor destined for failure.

 

Moreover, Google’s suite of productivity tools, including Gmail, Google Drive, and Google Workspace, has become indispensable for businesses seeking to streamline their operations and enhance collaboration.

With seamless integration across devices and platforms, Google’s productivity tools offer unparalleled convenience and efficiency, empowering businesses to work smarter, not harder.

Attempting to eschew Google’s productivity suite in favor of alternative solutions is not only impractical but also unwise, depriving businesses of the tools they need to succeed in today’s fast-paced digital landscape.

Furthermore, Google Analytics stands as the gold standard for web analytics, providing businesses with invaluable insights into their online performance and audience behavior.

From tracking website traffic and user engagement to analyzing conversion metrics and customer demographics, Google Analytics offers a comprehensive toolkit for optimizing online marketing strategies and driving business growth.

Attempting to gauge online performance without leveraging Google Analytics is akin to flying blind, devoid of the critical data needed to make informed decisions and drive meaningful results.

But perhaps the most formidable aspect of Google’s influence lies in its role as a gatekeeper of information and access.

With billions of users relying on Google’s platforms and services each day, the company wields immense control over the flow of online traffic and the dissemination of information.

For businesses seeking to connect with customers and expand their reach, Google’s dominance presents both a tremendous opportunity and a formidable challenge.

Attempting to circumvent Google’s influence and establish an online presence independent of its ecosystem is a Herculean task, fraught with uncertainty and risk.

In essence, attempting to run an online business without engaging with Google is akin to swimming against a relentless tide, fighting an uphill battle fraught with obstacles and limitations.

While alternative platforms and solutions exist, none possess the ubiquity, reach, and influence of Google’s ecosystem.

To thrive in today’s digital landscape, businesses must embrace Google’s dominance and leverage its suite of products and services to their advantage. You have no choice.

In conclusion, Google’s pervasive influence permeates every aspect of the online business landscape, making it virtually impossible to escape its grasp.

From search engine optimization to online advertising, productivity tools to web analytics, Google’s ecosystem encompasses a vast array of products and services that have become indispensable for businesses seeking to succeed in the digital age.

While alternative solutions may exist, none possess the ubiquity, reach, and influence of Google’s ecosystem.

To thrive in today’s digital landscape, businesses must embrace Google’s dominance and leverage its suite of products and services to their advantage.

You have no choice.


Kindly share this post
Continue Reading

E-Business

Hydrogen Hosts Catalyst Workshop, Highlights Resilient Business Models for Fintech Startups

Published

on

Kindly share this post

As part of its mission to empower African businesses with tools needed to thrive, garner admiration, and foster global acclaim, leading payment solution company, Hydrogen Payment Services Company Limited (Hydrogen), recently partnered with the Co Creation Hub (CcHub), to host the latest edition of the Catalyst workshop in Lagos.

The discourse addressed the potential risks and opportunities for startups and saw experts advise participants on the need to develop resilient business models that would scale across different economic climes.

Moderated by Miracle Ezechi, Digital Marketing Manager, Hydrogen, the panel session addressed dominant issues about the theme: ‘Adapting Fintech Business Models to Economic Climes: Flexibility, Agility and Customer-centricity’.

Mr. Emeka Awagu, Chief Technology Officer, Hydrogen, who spoke as a panellist, addressed the issue of customer-centricity, which according to him, is key to Fintech growth.

He advised startups to listen to customer demands and understand their needs in order to develop the right solutions that will lead to long term market viability.

“Innovation is key for startup growth. However, understanding customers’ needs and change in behaviour will help any startup to innovate better.

“Startups must be flexible and agile to develop solutions with high interoperability and processing speed, and they must be ready to learn from startups that have failed,” Awagu said.

With an estimated 61.07 percent of startups failing, the participants stressed the need for prudence.

“Statistically, a staggering number of startups fail, often due to financial mismanagement. Hence, founders must prioritise understanding and maintaining a healthy the Cost-to-Earnings ratio.

“It is not just a number, but a pivotal indicator of a company’s financial health as well as being a key attractiveness determinant for investors,” Awagu added.

On his part, Ina Alogwu, the Group Director, Digital Transformation, ARM HOLDCO, who also spoke as a panellist at the session, stressed the need for startups to develop sustainable products and solutions that will help them remain competitive in an environment that is faced with harsh economic realities.

“Many startup businesses fail within their first five years, however upcoming startups should not be discouraged, rather develop a culture that will encourage them to understand the reasons for failure and learn from mistakes.

“Startups should not be too rigid with their solutions and should be ready to accept changes that will drive innovation,” Alogwu stated.

Hydrogen will be deepening its economic impact series with a webinar planned for Thursday, April 25, even as businesses across Africa continue to face an array of challenges, ranging from inflation and currency fluctuations to rising operating costs.

Themed ‘Navigating Economic Challenges: Strategies for Sustainable Growth,’ the webinar will delve into key areas critical for businesses to not only survive but thrive in the face of economic adversity. Register using this link – https://bit.ly/Hydrogenwebinar.

Esteemed panellists for this event include Taofik Odukoya, CEO, Vanguard Pharmacy, and Okechukwu Odimgbe, Chief Financial Officer, Hydrogen. The session will be moderated by Nnenna Sam-Obioha, Ecosystem Orchestrator, Hydrogen.

 


Kindly share this post
Continue Reading

E-Business

Dexude Secures Funding to Revolutionize Education in Nigeria, Beyond

Published

on

Kindly share this post

Dexude, a leading edtech platform with operations in Nigeria, has announced that it has been awarded the prestigious Business Finland TEMPO funding.

Dexude Secures Funding to Revolutionize Education in Nigeria, Beyond

Charles Emembolu, founder of Dexude,

This significant funding injection marks a pivotal moment in Dexude’s journey towards transforming education through its AI-powered, live-first, expert-led, and community-driven platform.

The Business Finland TEMPO funding is specifically designed to support startups and SMEs aiming for international growth by building their expertise and solutions into international success stories in innovative ways.

Dexude’s commitment to innovation, coupled with its vision to enable a billion learners worldwide, aligns perfectly with the objectives of the TEMPO funding.

Commenting on this milestone achievement, Charles Emembolu, founder of Dexude, remarked, “We are incredibly honored and excited to receive the Business Finland TEMPO funding. This funding is not only a validation of Dexude’s mission to reinvent education but also a testament to the hard work and dedication of our team. With this support, we are poised to accelerate our efforts in democratizing access to quality education and empowering learners across Nigeria and beyond.”

L-r; Kelvin Chikezie, co-founder of Dexude; Kashifu Inuwa Abdullahi, Director-General/CEO of the National Information Technology Development Agency (NITDA); and Charles Emembolu, founder of Dexude

Kelvin Chikezie, co-founder of Dexude, added, “Securing the Business Finland TEMPO funding is a significant milestone for Dexude. It underscores our commitment to leveraging technology and innovation to revolutionize the way people learn and grow. We are grateful to Business Finland for believing in our vision, and we are excited to embark on this next chapter of Dexude’s journey.”

Dexude is on a mission to redefine education by providing learners with access to influential experts and thought leaders, live interactions, and a vibrant community-driven learning experience.

Through its platform, Dexude aims to break down barriers to learning and empower individuals to pursue their passions and unlock their full potential.

 

 

 

 


Kindly share this post
Continue Reading

Trending