Rise of automation: Battle of the bots

[frogboy]

Content source

http://www.net-security.org/secworld.php?id=19347

As outlined in the Global Application and Network Security Report 2015-2016, Radware found that throughout 2015, no industry was immune to cyber attacks, and few were prepared.

In 2016, attacks are predicted to become even more aggressive with the arrival of Advanced Persistent Denial of Service (APDoS) attacks and an increase in volume and scope of sophisticated bot-generated attacks against web application infrastructure.

"The front lines of information security will not include humans,” said Carl Herberger, vice president of security solutions at Radware. “As defenses continue to succumb to an endless flood of sophisticated, automated attacks and an infinite number of new attack techniques, the idea of humans having the ability to deploy detection technologies and choreograph responses in real-time will disappear. We are approaching the fall of human cyber defenses and the rise of cyber botted-defense."

Key findings from the report include:

Increase in frequency of ransoms: Attackers focus their Ransom demands toward service providers and leverage both DDoS and SSL Flood attacks when payment is not made.

Wider and more sophisticated attack modalities: Attacks are becoming completely automated and more sophisticated each day. New techniques like Burst Attacks, Advanced Persistent Denial of Service (APDoS), increase in volumetric pipe attacks, and Dynamic IP Attacks make it harder to defend against mostly manual solutions.

Full article. Rise of automation: Battle of the bots

 

[DracusNarcrym]

As outlined in the Global Application and Network Security Report 2015-2016, Radware found that throughout 2015, no industry was immune to cyber attacks, and few were prepared.

In 2016, attacks are predicted to become even more aggressive with the arrival of Advanced Persistent Denial of Service (APDoS) attacks and an increase in volume and scope of sophisticated bot-generated attacks against web application infrastructure.

"The front lines of information security will not include humans,” said Carl Herberger, vice president of security solutions at Radware. “As defenses continue to succumb to an endless flood of sophisticated, automated attacks and an infinite number of new attack techniques, the idea of humans having the ability to deploy detection technologies and choreograph responses in real-time will disappear. We are approaching the fall of human cyber defenses and the rise of cyber botted-defense."

Key findings from the report include:

Increase in frequency of ransoms: Attackers focus their Ransom demands toward service providers and leverage both DDoS and SSL Flood attacks when payment is not made.

Wider and more sophisticated attack modalities: Attacks are becoming completely automated and more sophisticated each day. New techniques like Burst Attacks, Advanced Persistent Denial of Service (APDoS), increase in volumetric pipe attacks, and Dynamic IP Attacks make it harder to defend against mostly manual solutions.

Full article. Rise of automation: Battle of the bots

Ever since remote access threats started to decline (intruders taking control of devices or performing malicious action) due to stricter security measures implemented by operating systems and applications alike, the focus of attack orchestrators shifted towards attacking the target online domain or service using methods of DDoS, APDoS, and others, with the intention of causing severe downtime as a result of the target systems' inability to handle the mass, or types, of requests. In turn, this downtime can in the long run cause great financial losses to the target businesses due to, as the name of the attack suggests, denial of service to potential users and/or customers.
The importance of such attack methods is amplified when they are used to support ransom threats, which are very commonly encountered these days.

It is very unfortunate to see that the majority of enterprises are unprepared to defend themselves against such threats, since, by investing in such security measures, they could avoid a multitude of potential disaster scenarios. It seems like they will have to acknowledge such threats the hard way, which might be rather unpleasant.

 

[jamescv7]

Do we need to surprise on these matter of cases? Remember that many enterprise or companies put that category as a minority tasks and when an incident happened then that's the time they put in action however the solution sometimes is temporary only.

The typical behavior should not always take for granted because the time and effort are already wasted when not implemented the stronger mechanism. My point here is if an enough budget for security concern then why not invest it, remember that the battle in cyberwar are much stronger and emerge continuously.