Connect with us


DDoS Mitigation Best Practice in an IoT world



The Internet of Things (IoT) is a conversation that has been gathering momentum in the public space for around the past five years or so, even though the concept has been around for a few decades. And yet, in this brand-new world of science fiction coming to life, threats lurk also.


So said Bryan Hamman, Arbor Network’s territory manager for Sub-Saharan Africa.


He said, “Obviously, people are excited when they think about the possibilities brought about by a world in which objects can be sensed or controlled remotely across existing network infrastructures. Never mind smartphones – the biggest consumer electronic companies in the world are competing with each other to launch ‘smart fridges’ as just one of an array of connected devices in the home of the future.


“These connected home devices create opportunities for even more integration of the physical world into computer-based systems, and the intention is that they will allow for improved efficiencies and a reduced need for human intervention – think of your smart fridge telling you when you need to throw away your expired milk, for example. At the same time, though, the IoT brings massive opportunities for criminals to use this increasingly connected world for their own commercial gain.”


Hamman noted that while the IoT brings the promise of efficiency and innovation to both homes and businesses, it also significantly expands the threat surface, allowing malware to turn IoT devices into being part of a botnet army – a network of private computers infected with malicious software and controlled as a group without the owners’ knowledge.


He said, “A botnet army grows by continuing to spread its malware to new devices. When a botnet army reaches a certain size, it becomes a revenue-generating platform for its creators by launching distributed denial of service (DDoS) attacks on networks. The attacks will be turned off and the network allowed to function normally again, in return for a ransom paid in Bitcoin payments.”


IoT devices are vulnerable to DDoS botnets for a number of reasons. For example, attackers are able to exploit a manufacturer’s re-use of default passwords across device classes. In addition, most IoT devices have access to the Internet without any bandwidth limitations or filtering, while the pared-down operating systems and processing together leave less room for security features – which is why most security compromises go unnoticed.


Hamman says that Arbor advises enterprises, Internet service providers (ISPs) and managed security service providers (MSSPs) to defend against DDoS attacks by implementing best current practices for DDoS defence, as follows:

  • Reducing the network’s surface of vulnerability.
  • Ensuring complete visibility over all network traffic to detect DDoS attacks.
  • Ensuring sufficient DDoS mitigation capacity and capabilities, both on-premise and in the cloud.
  • Having a DDoS defence response plan, which is kept updated and rehearsed on a regular basis.
  • ISP and MSSP network operators should actively participate in the global operational community, so that they can provide assistance when other network operators come under high-volume DDoS attacks, and in turn request mitigation assistance in need.
  • ISP and MSSP network operators should also take into account the baseline load of their normal Internet traffic. This is very important when determining which DDoS defence mechanisms and methodologies to use if under attack.


Hamman concluded, “Today, broadband Internet is become more widely available and more devices are being created with Wi-Fi capabilities and sensors built into them, while smartphones, at least in first world countries, are becoming the norm rather than the exception. This all means that the IoT phenomenon is simply gathering pace, day by day and hour by hour. It is more important than ever to remember that your connected devices are now a part of your network and as such, need the same security considerations to be applied.”


Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading


Court Adjourns Hearing of BVN Suit to March 1



The Federal Government on Tuesday requested for an adjournment over suit challenging its forfeiture order it secured from a Federal High Court in Abuja, to take over of monies not linked to Bank Verification Number (BVN).

The case was instituted by Access Bank and 19 other banks on behalf of the depositors affected by the interim forfeiture order by the Federal High Court, Abuja.

The lead counsel to the Federal Government,  Ade Okeaya-Inneh (SAN), leading two other Senior Advocate of Nigeria told the court that he and his team just took over the case file and needed time to study it.

Counsel to Access Bank and others, led by Paul Usoro (SAN) did not raise any objection to the respondents request for adjournment and the trial Judge, Justice Nnamdi Dimgba adjourned the matter till March 1, 2018, for hearing.

It would be recalled that Justice Dimgba on October 17, 2017, granted all the nine reliefs sought by Abubakar Malami (SAN) , Attorney General of the Federation (AGF) and Minister of Justice, including an interim forfeiture of all monies not linked to BVN, to the Federal Government.

Justice Dimgba who gave the order following a motion exparte brought before him by the Federal Government also ordered banks to disclose any investment made with funds from accounts without BVN in any product,  interest incurred and other relevant information related to the transaction made on the accounts.

The court ordered all the 19 Deposit Money Banks (DMBs) operating in the country to release to federal government names of accounts not yet connected to BVN; account numbers; their outstanding balances; domiciling locations; and domiciliary accounts without BVN and where they are domiciled.

Nigeria deposit money banks that were listed as respondents in the ex-parte suit are Access Bank, Citi Bank, Diamond Bank, Ecobank, Fidelity Bank, First Bank and First City Monument Bank.

Others are: Guarantee Trust Bank, Heritage Bank, Keystone Bank, Skye Bank, Stanbic IBTC Bank, Standard Chartered Bank, Sterling Bank, Union Bank, United Bank for Africa, Unity Bank, Wema Bank and Zenith Bank.

The banks were also directed to publish all bank accounts not linked to BVN in national newspapers with a 14-day notice for individuals with interest in such accounts to come forward and justify why their funds should not be forfeited to the Nigerian government.

Justice Dimgba also ordered the CBN, which was joined as 20th respondent alongside the 19 DMBs, to appoint an official who will examine all the details submitted to the apex bank for compliance.

The government argued the matter under Section 3 of the Money Laundering Act, 2011, which provides that, banks must, “Ensure that documents, data or information collected under the customer due diligence process is kept up-to-date and relevant by undertaking reviews of existing records, particularly for higher risk categories of customers or business relationships.”

The BVN is a unique identification number that can be verified and used to transact business across all the banking platforms in Nigeria.

The Central Bank of Nigeria (CBN) imposed the policy to capture customers’ data for financial transactions and check fraud in the banking system.

Registration for BVNs commenced on February 14, 2014, across the country and the apex bank has disclosed that over 20.8 million customers enrolled 40 million bank accounts before the October 31, 2015, final deadline for customers residing within the country.

The CBN extended the deadline for Nigerians in the diaspora to December 2016 to sign up for the BVN system.

But hundreds of thousands, home and abroad are still believed to be left behind.

Continue Reading


Visa Launches Pilot Test of Biometric EMV Cards



Visa has initiated the first commercial test of an EMV dual-interface payment card with on-card biometric ID, according to a press release.

Tests will begin in early 2018 at the Bank of Cyprus and Mountain America Credit Union, as Visa seeks to assess the biometric technology and the cardholder experience in various retail environments.

The Bank of Cyprus will pilot test technology from Gemalto;  Mountain America Credit Union will test a product from Fingerprint Cards and Kona-I.

To use the card, the cardholder places his or her finger on the sensor, which compares the live fingerprint against a template of prints obtained during cardholder enrollment and securely stored on the card. If the prints match, the card an integrated light will flash green. If not, the light will flash red, the release said.

“The world is quickly moving toward a future that will be free of passwords, as consumers realize how biometric technologies can make their lives easier.

As electronic payments expand dramatically around the world, Visa is committed to developing and investing in emerging capabilities that deliver a better, more secure payment experience,” said Jack Forestell, head of global merchant solutions at Visa.

Continue Reading


Internet Solutions Connects to Microsoft Azure Network



Pan-African Internet services providerInternet Solutions has incorporated its CloudConnect colocation connectivity solution into Microsoft’s Azure ExpressRoute network.

With Internet Solutions’ carrier infrastructure, Azure ExpressRoute users in Africa will link directly to the Microsoft Cloud – including Azure, Microsoft Office 365 and Microsoft Dynamics 365 – hosted in Microsoft’s South African data centres when they come online in 2018.

“The ability to link directly and securely to the Microsoft Azure cloud platform locally will significantly increase the performance of our customers using Microsoft’s cloud services in South Africa,” says Gopal Govinder, executive at Internet Solutions.

“We anticipate that this will encourage companies to move more of their workloads into the cloud, so they can take greater advantage of the benefits that cloud technology offers.”

Govinder explains that average latency between SA and London is currently less than 180 milliseconds, while Internet Solutions’ terrestrial network latency is under 20 milliseconds nationally.

According to Govinder, this is a significant boost in regards to accessing critical cloud services such as client account information or stock data.

Internet Solutions will continue to connect organisations to Microsoft’s products through London and Amsterdam exchange points.

“We’re moving towards a global digital economy where enterprises and their service offerings have global reach, but in many ways it is more important than ever to localise delivery. This is what Microsoft is offering by investing in data centres in South Africa,” Govinder says.

Ross Ortega, partner manager, Microsoft Azure Networking at Microsoft, says: “We’re pleased to add Internet Solutions as an option for companies to connect to Microsoft Azure through Azure ExpressRoute. The Microsoft Cloud delivered from Africa through partners like Internet Solutions will help developers build new and innovative apps, and support our mutual customers in their cloud journey.”

Continue Reading


Copyright © 2017 Communication Week Media Limited.