Network-Layer DDoS Attack Trends for Q1 2020
May 15, 2020Omer Yoachimik, Arun Singh
Summary
This post analyzes network-layer DDoS attack trends for Q1 2020, noting a rise in smaller, shorter attacks (under 10 Gbps, under 1 million pps, 30-60 minutes duration) attributed to DDoS-as-a-service and the ROI for attackers. It also highlights the persistence of larger attacks (up to 550 Gbps) and a decrease in attacker persistence compared to Q4 2019. The analysis details top attack vectors (SYN, ACK, CLDAP) and observes an increase in attacks during the COVID-19 crisis, with a surge in large-sized attacks in late March. Cloudflare's mitigation strategies are discussed in relation to these trends, emphasizing rapid Time To Mitigate SLAs, distributed architecture, and massive network capacity.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack