E-Business
The Case of Simultaneous, Short Duration DDoS Attacks
Over the last decade, DDoS attacks have proliferated, possibly becoming the primary threat for every website or web application.
The ultimate goal is to bring down sites by flooding them with fake requests, usually from multiple locations. The outcome of such attacks ranges from slow page loads to blocking legitimate traffic.
Among the thousands of DDoS attacks that happen every day, you’ll find attacks that last a number of days, as opposed to short-duration attacks that only take a few minutes for attackers to coordinate and launch at a time.
These attacks are becoming much more commonplace, whether the goal is to take a site down or if they’re used as a smokescreen to divert site owners’ attention.
In this article, I would like to share our real life experience with short-duration DDoS attacks, addressing what happens when this type of attack targets multiple sites simultaneously.
5 Short Attacks in 3 Days
We recently witnessed a three day, continuous attack that targeted two domains of a well-known bank.
On the first day, the bank suffered a significant volumetric attack that lasted five to six minutes, but consumed bandwidth at a rate of dozens of gigabytes per second.
Another attack, that lasted fifteen minutes, took place on the second day, targeting the second domain of the bank. On the third day, the same domain that was targeted the previous day was hit with a long duration attack.
We could see that the first and second attacks were reconnaissance attacks, executed to evaluate which of the two domains was more vulnerable. It is clear that the second domain was more susceptible since it was hit much harder in the third attack.
In parallel, we detected that there was another short-duration spike attack that targeted one of our Telco customers.
Just two hours later, there was another attack against a large utility organization. Because of this pattern, we were able to identify that all three attacks were performed by the same attacker and could warn and better protect our customers against further attacks.
Comparing the volume of bandwidth we’ve encountered on the first day of the attacks, to a DDoS attack’s average peak size of 7.39 Gbps, as reported by SCMagazine, we can see that short-duration attacks use large volumes of traffic in short, shotgun-like bursts.
Attackers leverage these short-duration attacks to evaluate which companies and organizations are easiest to infiltrate.
We assume that this also has to do with the availability of resources. These types of attacks are more likely to come from smaller, private groups that are shorter on resources, as opposed to criminal groups or countries which have access to unlimited resources and can therefore launch long-duration attacks from day-one.
Here’s what we’ve seen over time:
Mitigation
When it comes to short-burst attacks, time is of the essence. Attacks are likely to go under the radar and leave no time to respond.
Organizations managing multiple web domains must have the ability to centralize incoming data, preferably by working with the same security vendor across all their domains.
This enables them to predict attacks by analyzing trends and patterns across their sites. Organizations should demand this capability from their security vendors, who should also be willing to use data from various customers in order to predict potential attacks on other customers, as described in the above case study.
We see a growing number of short duration attacks across our customer base. Awareness to this new pattern is key: customers typically assume that the attack is over, while this may actually be a sign for a much larger attack coming through.
In light of this new pattern using services and tools that can aggregate attack information across customers and websites is an ideal way to predict and avoid the massive DDoS attacks about to come.
Yariv Hazony is VP Product at Sentrix, which provides protection against DDOS and other attacks against web applications, www.sentrix.com
E-Business
NDPC to Impose Heavy Fines on Defaulting Data Processors, Controllers this Year
Nigeria Data Protection Commission (NDPC) has announced plans to significantly ramp up enforcement and impose substantial fines on data controllers and processors that violate the Nigeria Data Protection Act (NDPA) of 2023.
This was disclosed by Dr Vincent Olatunji, national commissioner/CEO of the Commission, in a video message outlining the Commission’s 2025 agenda, shared on the agency’s social media platforms.
A statement issued by the Communications Division of the Commission on Friday quoted Dr Olatunji as saying that, “For data controllers and processors, there is going to be massive enforcement. We have never really issued any fine, but going forward, you’ll hear us giving heavy penalties.”
He assured Nigerians that their data rights, as guaranteed by the NDPA, will be fully protected, and defaulting data controllers and processors will face strict consequences.
The Commissioner highlighted the NDPC’s extensive engagements with stakeholders across public and private sectors to promote awareness and compliance with the Commission’s mandate.
The efforts, he said, have resulted in the signing of Memorandums of Understanding (MOUs) with key organisations, including the National Insurance Commission (NAICOM), National Lottery Regulatory Commission (NLRC), the Data Privacy Office of Canada, and the Dubai International Financial Centre Authority (DIFC), among others.
Dr Olatunji also shared that the NDPC will advance to the second phase of its Strategic Roadmap and Action Plan (NDP-SRAP 2023-2027) in 2025.
This phase is expected to create job opportunities within Nigeria’s data protection and privacy ecosystem, particularly for young people.
The Commission has been actively training Nigerians in data protection and privacy, creating a pool of globally competitive experts within the data protection sector in 2025.
“There are a lot of data controllers and processors that are looking for people to work with them. Now those that we have trained in 2024, those we have certified, we are going to do more this year to actually launch them to the job market where they can really work with data controllers and processors,” he said.
Additionally, the NDPC will continue nationwide efforts to promote data protection awareness.
The Commission aims to educate citizens about their rights and the importance of data privacy while reminding data controllers and processors of their obligations under the NDP Act.
Dr Olatunji emphasised that these initiatives are part of the broader goal to embed a culture of data protection and privacy in Nigeria.
As part of its international engagement efforts, Nigeria will host the “Network of African Data Protection Authorities Conference” in May 2025, with over 40 nations with existing data protection laws expected to attend.
According to Dr Olatunji, this global event will position Nigeria as a leader in the data protection ecosystem, and bring significant economic benefits to the country.
The NDPC reiterated its commitment to ensuring data protection and privacy become integral to Nigeria’s digital landscape, building trust and fostering economic growth, the statement added.
E-Business
NIPOST Reports 275 Percent Revenue Growth in 2024
Nigeria Postal Service (NIPOST), achieved a 275 percent increase in revenue for the year 2024, according to Tola Odeyemi, postmaster general.
At the beginning of the year, NIPOST set an ambitious target of generating N10 billion in revenue.
Although specific figures for the end of the year were not disclosed, the reported increase suggests a significant recovery for the postal service, which had previously faced consistent decline.
Odeyemi, who made the disclosure while listing NIPOST’s achievements for the year recently, attributed the growth to a series of reforms aimed at enhancing service quality and eliminating revenue leakages
The NIPOST boss detailed the steps taken to boost revenue, noting the implementation of Point of Sale (PoS) terminals in high-transaction areas, which has streamlined payment processes and improved customer experience.
She said, “One of the major achievements for us in 2024 has been a 275% increase in revenue from 2023. We achieved this by plugging a lot of the revenue leakages that we have by deploying PoS terminals for payment in our high transaction areas, as well as ensuring that our quality of service goes up.”
Looking ahead, Odeyemi outlined NIPOST’s plans to sustain this growth trajectory.
She said the organisation has embarked on renovations and upgrades of key locations in Abuja, Lagos, and Kaduna, alongside enhancements to the Postal Institute, which is central to the agency’s change management initiatives.
Furthermore, she stated that NIPOST is gearing up for several major developments in 2025, including the rollout of a national addressing system and digital postcode services, specialised logistics for agriculture and healthcare, and a relaunch of its financial services.
“There will be infrastructure upgrades, which will take place across the Federation and there will be an increase in access to government services through your local NIPOST location,” she said.
E-Business
Firm Unveils Drop App to Revolutionize E-hailing in Nigeria
Sure Switch Tech, a technology company, has unveiled the Drop App, a ground-breaking e-hailing platform designed to empower drivers and passengers in Nigeria.
The Co- Founder who doubled as the Chief Executive Officer of Sure Switch Tech, Ugbah Chukwuma, during the unveiling in Abuja, disclosed that Drop App is an innovative online motor park that connects drivers and passengers directly, allowing them to negotiate terms and travel with ease and confidence.
Chukwuma noted: “What sets the Drop App apart is its driver-first approach, which ensures that drivers keep more of their earnings, saying Drop App is built for convenience, affordability, and empowerment. The app provides a low-cost, high-reward platform for drivers and a reliable and flexible service for passengers.”
According to him, “we understand the challenges that many Nigerian drivers face, and we designed the Drop App to provide real solutions. We are committed to driving innovation, empowering communities, and creating platforms that prioritise fairness and opportunity for all.
He further explained that Sure Switch Tech is a leading technology company dedicated to creating innovative solutions that empower communities and drive growth, stating.
“Today, we launched the Drop app, a platform that redefines e-hailing and transportation in Nigeria. At Trust Tech Limited, we are committed to creating technologies that address existing challenges and empower the communities we serve.
“The Drop app is more than just an e-hailing app; it’s an online motor park, a digital hub where drivers and passengers can connect directly, negotiate terms, and travel with ease and confidence.
“What sets Drop apart is its driver-first approach. We don’t refer to drivers as drivers; we call them our partners. We’ve chosen a different path, where no commissions are deducted from drivers’ earnings. Drivers get 100% of their earnings and pay only a flat rate of N500 for 24-hour service on our platform.
“Another key feature of Drop is the freedom for drivers and passengers to negotiate ride prices directly. We ensure transparency, fairness, and mutual agreement. The Drop app is built for convenience, affordability, and empowerment.
“It enables drivers to scale their business and support their families. For passengers, it’s a low-cost, high-reward platform that guarantees value for money. It’s a reliable, flexible service that accommodates their preferences and budget.”
- E-Business1 day ago
A beginner’s guide to Temu: Your ultimate shopping companion
- E-Financial1 day ago
CBN did not Force 1000 Workers to Resign- Cardoso
- E-Financial1 day ago
Bankit MFB Unveils Web Banking Platform
- Telecom1 day ago
Navigating the Path to Sustainable Telecom Services for Subscribers
- E-Financial1 day ago
World Bank Okays $1.5Bn Loan to Nigeria in Support of Tax Bills
- Telecom1 day ago
Data breaches: Commission warns banks, hospitals, others against infractions
- Telecom3 days ago
Telcos Threaten to Shut Down Services in Some Parts of Nigeria over Tariff
- Telecom2 days ago
Subscriber Group Rejects Telcos Push for Tariff Hike