Imperva Unveils Scalable Cloud-Based DDoS Protection

Imperva, which is based in Redwood Shores, Calif., is launching a new subscription service, starting at $12,000 a year, that will provide protection against the majority of distributed denial-of-service (DDoS) attacks, said Rob Rachwald, director of security strategies. Powered by Imperva's cloud-based subsidiary Incapsula and scaling up to 4 Gbps, key capabilities include defense against all types of DDoS threats, including network-based attacks, like SYN or UDP floods, and application attacks.

A recent study by Verisign found that, although more than 80% of U.S. organizations have some sort of DDOS protection, either on-premises or through a service provider, nearly two-thirds experienced DDoS attacks. A majority (63%) of the respondents said that they had experienced at least one DDoS attack in the past year, and one in nine said their organizations had suffered six or more attacks. Nearly half of those attacked said that their website was down for five or more hours, and just under a quarter of the victim organizations said their sites were down for 12 hours or more.

According to Trustwave's semiannual Web Hacking Incident Database report, DDoS attacks were up 22% in the second half of 2010, and were successful in disrupting commerce and bringing down websites of large businesses and associations.

Attacks against government agencies resulted in defacement in 26% of attacks, while the finance sector experienced monetary loss in 64% of attacks and retail was most affected by credit card leakage at 27%. The report found that most businesses were not equipped to handle such an attack because they had not tested, nor properly implemented, anti-automation defenses for their Web application architecture.

Preventing DDoS attacks can be very expensive, Rachwald said, and the traditional premises-based security vendors don't offer the flexibility and scalability of Imperva. He said the overwhelming majority of attacks tend to be in the 10M to 200 Mbit per second range, with Imperva's service starting at 1 Gbps, bursting to 2 Gbps.

For customers requiring more protection, there is a 2 Gbps bursting to 4 Gbps option. Higher capacities will be brought out in the near future to address the most demanding customers, such as ISPs.

Read the rest of this article on Network Computing.

The vendors, contractors, and other outside parties with which you do business can create a serious security risk. Here's how to keep this threat in check. Also in the new, all-digital issue of Dark Reading: Why focusing solely on your own company's security ignores the bigger picture. Download it now. (Free registration required.)