Global DDoS attack data released for 1H 2016

Arbor Networks has released global DDoS attack data for the first six months of 2016, showing a continued growth in both size and frequency of attacks. A 73 percent increase in peak attack size over 2015 was observed, to 579Gbps.

In the first half of 2016, 274 attacks over 100Gbps were monitored, versus 223 in all of 2015. Forty six attacks over 200 Gbps were monitored during the testing period, versus 16 in all of 2015. Great Britain, France and the US are the top targets for attacks over 10Gbps.

A 1 Gbps DDoS attack is large enough to take most organisations completely offline. The average attack size in the first half of 2016 was 986Mbps, a 30 percent increase over 2015. The average attack size is projected to be 1.15Gbps by the end of 2016.

DDoS remains a commonly used type of attack due to the readily available free tools and inexpensive online services that allow anyone with a grievance and internet to launch an attack.

“The data demonstrates the need for hybrid, or multi-layer DDoS defence. High bandwidth attacks can only be mitigated in the cloud, away from the intended target. However, despite massive growth in attack size at the top end, 80 percent of all attacks are still less than 1Gbps and 90 percent last less than one hour. On-premise protection provides the rapid reaction needed and is key against 'low and slow' application-layer attacks, as well as state exhaustion attacks targeting infrastructure such as firewalls and IPS,” said Darren Anstee, chief security technologist at Arbor Networks.