Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

Connect with us

E-Business

Five Steps to Evaluating a DDoS Managed Service Provider

Published

on

Bryan Hamman, Arbor Network’s territory manager for Sub-Saharan Africa
Kindly share this post

The news that the Southern African Department of Labour was recently able to foil a distributed denial of service (DDoS) attack on one of its external facing servers in early September reminds us that businesses and governments must remain vigilant at all times

 

http://www.labour.gov.za/DOL/media-desk/media-statements/2018/the-department-of-labour-acknowledges-an-attempted-cyber-attack-on-its-website.

 

While this DDOS attack was unsuccessful, a 2016 attack in Liberia, West Africa took the entire country offline for a week, when a Mirai botnet variant known as Botnet 14 spent seven continuous days on the offensive, flooding the two companies that co-owned the fibre going into country with 600 Gbps flows that overwhelmed its infrastructure. https://threatpost.com/ddos-attacks-get-bigger-smarter-and-more-diverse/134028/

 

Bryan Hamman, territory manager for sub-Saharan Africa at NETSCOUT Arbor, which specialises in advanced distributed denial of service (DDoS) protection solutions, said, “We know that DDoS attackers will target anyone today, from SMEs that might have valuable data, to banks with sophisticated security systems, all the way to governments at the level of a sovereign nation. By using multiple compromised computer systems to attack a target and cause a denial of service for legitimate users, a flood of incoming information forces the target system to slow down or even crash. And so vigilance remains the eternal watchword.”

 

In this vein, NETSCOUT Arbor says the case for a managed DDoS protection and mitigation service is well established as partnering with a provider that can oversee your organisation’s security operations takes a critical IT management issue off your plate, boosts your staff resources, and gives you access to specialised DDoS expertise. But not all managed DDoS services are alike.

 

Hamman clarified, “When you are choosing your managed DDoS service provider, NETSCOUT Arbor outlines the following key areas to look out for: the flexibility to handle customised workflows; customer-focused reporting and intelligence; adequate network size; the experience of the provider’s IT team; and a best-practice hybrid solution.”

 

Flexibility to handle custom workflows: Your organisation may already have some operational processes and procedures in place for dealing with DDoS threats. A managed service provider should be able to adapt and align to you, rather than requiring you to change your processes. “You may wish to ask questions such as: Under what scenarios do you want the service provider to initiate mitigation action on its own, or seek your authorisation? Can the provider support different actions based on different alert types or event levels?” says Hamman.

 

Customer-focused reporting and intelligence: A good DDoS provider will deliver reports detailing the latest incidents and the actions taken in response to security events.

 

However, a DDoS provider that is prepared to take their service to the next level above this will take a more proactive, consultative approach, which leverages global threat intelligence as the basis for recommendations to improve your security posture. A managed service provider should also be able to supply executive-level reporting that enables you to demonstrate ROI and key metrics for the C-suite.

 

Size of network: NETSCOUT Arbor says DDoS attacks are growing in sheer size and rapidly approaching terabyte territory, due largely to amplification techniques and the emergence of Internet of Things (IoT) botnets. The capacity to absorb and disperse the largest known attacks is imperative. Equally important is a distributed infrastructure, with multiple locations that enables mitigation to take place as close to the source of attack as possible. This not only avoids “choke points” – it accelerates time-to-mitigation cycles.

 

While absolute network size is an important consideration, so too is the amount of capacity dedicated to DDoS mitigation. A dedicated provider is critical to mitigating massive attacks. It should be noted that managed service providers support multiple customers, and there is always the risk that several will be hit at once. It is not enough, therefore, to have capacity levels that are equal to or even twice the size of any potential attack. Rather, the network must be several orders of magnitude bigger than the largest known attacks. Ten terabytes of capacity is quickly becoming the standard that will define the modern, managed DDoS provider.

 

Experience of team: A good provider will be highly reliant on automation. Over and above this, your provider of choice needs to understand that foiling threat actors takes human intelligence – the ability to recognise and analyse a real attack, understand its origins and quickly determine its objectives. “Therefore,” says Hamman, “your provider of choice should have dedicated research teams with decades of experience studying, analysing and overseeing the successful mitigation of DDoS attack, as well as excellent security expertise from team members with diverse professional backgrounds and complementary skills.”

 

Best-practice hybrid solution: Increasingly, security experts agree that a hybrid solution, combining on-premise and cloud capabilities, is the best defence against DDoS attacks. The on-premise component can typically capture the vast majority of malicious traffic. If an attack threatens to exhaust the capacity of an on-premise appliance, the cloud capability can automatically activate. Today, on-premise defences can be virtualised. With a fully managed service, costs are offset by a reduction in staffing requirements. And you only pay for as much cloud capacity you consume.

 

“As we’ve reported previously, data from the NETSCOUT Arbor Worldwide Infrastructure Security Report (WISR) for 2018 showed that South Africa was within the top 10 of countries targeted by DDoS attacks for both the 2018 and 2017 WISR reports. DDoS defences simply cannot be emphasised enough,” concludes Hamman.

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

FG Partners UK to Combat Cross-border Cyber-crime

Published

on

Kindly share this post

The federal government and the United Kingdom signed an agreement Tuesday to combat the growing threat of cyber-crime. The Memorandum of Understanding was signed following a courtesy visit by David George Hanson, minister of the home office, UK, to the Nigeria Police Force headquarters, Louis Edet House in Abuja.

Transnational crime is a big problem for both the UK and Nigeria, so the governments intend to strengthen existing collaboration efforts to crack down on cyber-criminals and protect their industries from unlawful activities.

Offences such as online fraud, identity theft, digital extortion, and ransomware , operate across many jurisdictions, and frequently necessitate sophisticated cooperation efforts, according to the two governments during a press conference.

Furthermore, Lateef Fagbemi, Nigeria’s attorney-general and minister of justice, established the Joint Case Team on Cybercrime, which aims to address the need for a coordinated and robust approach to combating cybercrime, as stated in the Cybercrimes Act of 2015, which criminalises cyber-related offences.

Hanson underlined the importance of ongoing cooperation efforts to combat international crime in a number of areas, affecting vulnerable individuals.

He said: “We need to look again at how we can build cooperation between the Federal Government, the federal police, and our police forces and National Crime Agency to take action against these international criminals, who are exploiting vulnerable people in a whole range of areas. The National Crime Agency, the Home Office Fraud Department, and the High Commission need to make sure we make a big impact on this transnational crime.”

“The collaboration between the Nigerian Police Force and National Crime Agency continues to serve as a model in international law enforcement cooperation. We have successfully conducted joint operations into many cases of cybercrimes and online fraud. With your [UK government] cooperation, we have continued to bust other criminal networks around the world,” added inspector-general of Nigerian Police Force, Kayode Adeolu Egbetokun.

 


Kindly share this post
Continue Reading

E-Business

CAC to Prosecute Business Owners Operating Without Registration

Published

on

Kindly share this post

Corporate Affairs Commission (CAC) has reaffirmed its commitment to enforcing business registration laws in Nigeria, warning that individuals and organizations operating unregistered businesses will face prosecution.

In a statement, the CAC emphasized that conducting business without proper registration violates the Companies and Allied Matters Act (CAMA) 2020, undermining transparency and accountability in the corporate sector.

The commission stressed that registration is not only a legal requirement but also a gateway to formal business opportunities, including access to bank loans, government grants, and partnerships.

The enforcement drive will be nationwide, targeting small and medium-sized enterprises (SMEs), online vendors, and informal traders who have failed to comply despite previous awareness campaigns and registration amnesty windows.

The CAC disclosed that enforcement teams, in collaboration with security agencies, will be deployed to identify and prosecute defaulters.

The commission urged business owners to take advantage of its simplified registration platform to regularize their status, noting that compliance will boost investor confidence and improve Nigeria’s ease of doing business. It warned that ignorance of the law will not be accepted as an excuse.

Business owners are advised to act promptly to avoid legal consequences, as the CAC moves to ensure a more structured and regulated business environment in Nigeria.


Kindly share this post
Continue Reading

E-Business

NCC Vows to Tackle Online Infringement, Block Illegal Music Websites

Published

on

Kindly share this post

Nigerian Copyright Commission (NCC) has pledged to enforce its legal obligations to combat online intellectual property infringement and urged commercial music users to obtain proper licences from rights holders or their representatives.

NCC Vows to Tackle Online Infringement, Block Illegal Music Websites

The Commission stated that this ensures creators are fairly compensated, supporting the music industry’s sustainable growth.

In a statement commemorating the 2025 World Intellectual Property Day, themed “IP and Music: Feel the Best of IP,” the NCC announced plans to enforce the Copyright Act 2022, which allows for the takedown of infringing materials and blocking of websites hosting illegal content.

Signed by Mrs Ijeoma Egbunike, director of Public Affairs, the statement outlined an aggressive anti-piracy campaign in collaboration with the private sector, targeting the online environment.

Egbunike affirmed the NCC’s commitment to establishing enforceable standards for transparency, digital audits, and real-time royalty reporting to protect creators’ rights. She stated, “The NCC will continue to champion policies that support the growth of the music industry, improve the livelihoods of Nigerian musicians, and foster a culture of creativity and respect for intellectual property.”

Despite the global success of Afrobeats and other Nigerian genres, the NCC noted that many musicians face low royalty returns due to rampant digital piracy.

To address this, the Commission revised its Collective Management Regulations to enhance transparency and accountability among Collective Management Organisations (CMOs).

The NCC emphasised that proper licensing is a legal obligation and vital for Nigeria’s creative economy, stating, “Music must feel the beat of intellectual property for the full potential of creativity to be realised.”

The Commission highlighted that creators’ livelihoods depend on fair royalty compensation.

Recent enforcement measures include the NCC’s designation by the Attorney-General of the Federation as an authority under the Proceeds of Crime (Recovery and Management) Act 2022.

This, combined with the Copyright Act 2022, empowers the NCC to order takedowns and block illegal music distribution websites.


Kindly share this post
Continue Reading

Trending