Radware releases Q3 DDoS and application attack report

Friday, 29 October 2021 08:50

By Radware

Radware director of threat intelligence Pascal Geenens

GUEST RESEARCH: Radware, a leading provider of cyber security and application delivery solutions, has published results from its Q3 DDoS and Application Attack Report.

The report provides an overview of the DDoS attack landscape, application attack developments, and unsolicited network scanning trends. The data for the report analyses network and application attack activity sourced from Radware's cloud and managed services, and Radware's Global Deception Network.

"More DDoS attacks were blocked during the first nine months of 2021 than all of 2020," said Radware director of threat intelligence Pascal Geenens.

"During the third quarter, DDoS records for large volumetric attacks were broken across three continents. At the same time, phantom floods, or micro attacks that typically fly below the radar, increased. The reality is that organisations need more granular detection and multi-layer defences to protect against stealthier and more complex DDoS attacks."

DDoS attacks rise

Yearly trends: The number of malicious events blocked by Radware's DDoS mitigation solution was up 75% during the first nine months of 2021 compared to the same period in 2020. And the total volume blocked in the first nine months of 2021 was 44 percent higher than the same period in 2020.

Quarterly trends: Although the total number of events per company for the third quarter was slightly below previous quarters in 2021, the number stayed above the highest quarterly level recorded in 2020.

Industry trends: The most attacked industry in the third quarter was technology, with an average of 2,638 attacks per company, followed by healthcare (1,785 attacks per company), communications (1,525 attacks per company), and finance (1,337 attacks per company).

Web application attacks double

Yearly trends: Web application attacks based on known vulnerabilities and techniques are ramping up quickly. The number of blocked web security events per company doubled every quarter for the first three quarters of 2021.

Quarterly trends: The third quarter of 2021 accounted for 2.1 million blocked security events per company per quarter, or an average of 700,000 blocked security events per month per company.

Predictable resource location attacks, the most important security violation in the third quarter, was witnessed twice as often as SQL injection, the second-most violation, followed by code injection attacks and cross-site scripting attacks. The top two violations reported in the third quarter are aligned with the top web application security concerns as reported in the OWASP Foundation's recently published 2021 top 10 list.

Industry trends: In the third quarter of 2021, the most attacked industry was banking and finance, which accounted for almost 23% of blocked web security events, followed by government (16%), technology (15%), and retail and wholesale trading (12%).

Unsolicited network scanning and attack activity surges

Quarterly trends: Third quarter unsolicited scanning activity as recorded by Radware's Global Deception Network peaked at 27 million events per day, representing the second highest level during 2021.

According to Geenens, "Network scanning and attack activity was marked by opportunistic and random scanning that constitutes a large part of the vulnerability and exploit threat landscape.

"Malicious actors continuously leverage old and freshly disclosed vulnerabilities such as remote command execution and command injection exploits that are easy to integrate into existing malware and exploit tools. Along with the evolution in cloud resources and services, there is no more hiding on the internet. Every deep corner of the internet gets inventoried in convenient IoT search engines."

Radware's complete Q3 DDoS and Application Attack Report can be downloaded here.

About Radware

Radware is a global leader of cyber security and application delivery solutions for physical, cloud, and software defined data centres. Its award-winning solutions portfolio secures the digital experience by providing infrastructure, application, and corporate IT protection, and availability services to enterprises globally. Radware's solutions empower enterprise and carrier customers worldwide to adapt to market challenges quickly, maintain business continuity, and achieve maximum productivity while keeping costs down. For more information, please visit the Radware website.

Subscribe to ITWIRE UPDATE Newsletter here

PROMOTE YOUR WEBINAR ON ITWIRE

It's all about Webinars.

Marketing budgets are now focused on Webinars combined with Lead Generation.

If you wish to promote a Webinar we recommend at least a 3 to 4 week campaign prior to your event.

The iTWire campaign will include extensive adverts on our News Site itwire.com and prominent Newsletter promotion https://itwire.com/itwire-update.html and Promotional News & Editorial. Plus a video interview of the key speaker on iTWire TV https://www.youtube.com/c/iTWireTV/videos which will be used in Promotional Posts on the iTWire Home Page.

Now we are coming out of Lockdown iTWire will be focussed to assisting with your webinatrs and campaigns and assassistance via part payments and extended terms, a Webinar Business Booster Pack and other supportive programs. We can also create your adverts and written content plus coordinate your video interview.

We look forward to discussing your campaign goals with you. Please click the button below.

MORE INFO HERE!

INTRODUCING ITWIRE TV

iTWire TV offers a unique value to the Tech Sector by providing a range of video interviews, news, views and reviews, and also provides the opportunity for vendors to promote your company and your marketing messages.

We work with you to develop the message and conduct the interview or product review in a safe and collaborative way. Unlike other Tech YouTube channels, we create a story around your message and post that on the homepage of ITWire, linking to your message.

In addition, your interview post message can be displayed in up to 7 different post displays on our the iTWire.com site to drive traffic and readers to your video content and downloads. This can be a significant Lead Generation opportunity for your business.

We also provide 3 videos in one recording/sitting if you require so that you have a series of videos to promote to your customers. Your sales team can add your emails to sales collateral and to the footer of their sales and marketing emails.

See the latest in Tech News, Views, Interviews, Reviews, Product Promos and Events. Plus funny videos from our readers and customers.

SEE WHAT'S ON ITWIRE TV NOW!

Radware releases Q3 DDoS and application attack report