{"id":13939,"date":"2018-09-11T09:00:56","date_gmt":"2018-09-11T08:00:56","guid":{"rendered":"http:\/\/www.devopsonline.co.uk\/?p=13939"},"modified":"2018-09-10T14:25:57","modified_gmt":"2018-09-10T13:25:57","slug":"ddos-attackers-increasingly-abuse-public-cloud-services","status":"publish","type":"post","link":"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/","title":{"rendered":"DDoS attackers increasingly abuse public cloud services"},"content":{"rendered":"<p>DDoS attackers are increasingly abusing public cloud services to launch attacks, according to new research from the cloud anti-DDoS vendor, Link11.<\/p>\n<p>Data from Link11\u2019s Security Operation Center (LSOC) shows that a quarter of all DDoS attacks in Europe in the 12 months from July 2017 to June 2018 used public cloud server-based botnets, compared to 18.5% in the previous 12 months \u2013 a 35% increase.<\/p>\n<p>During the 12 months to June 2018, Microsoft Azure was the cloud service most exploited for DDoS attacks, with 38.7% of such attacks using Azure servers on average.<\/p>\n<p>Amazon Web Services (AWS) was used in 32.7% of attacks on average, and Alibaba servers used in 17.9% of attacks. Google servers were abused much less often, used in only 10.7% of attacks.<\/p>\n<h2>Cloud server-based botnets<\/h2>\n<p>According to Link11, public cloud server-based botnets are the ideal platform for launching DDoS attacks.<\/p>\n<p>Cloud instances generally offer bandwidths of between 1 and 10 Gbps, enabling attack volumes which can be as much as 1000 times higher than is possible with individual compromised devices such as home routers or IoT cameras.<\/p>\n<p>The LSOC reported that the peak attack volumes of these cloud-based attacks exceeded 150 Gbps in May. Cloud servers provide memcached or SSDP services, which amplify attack volumes.<\/p>\n<p>Aatish Pattni, Regional Director UK &amp; Ireland, Link11, comments:\u00a0 \u201cThe people behind DDoS attacks are embracing the use of public cloud services for the same reasons as legitimate organisations: the services provide flexible, on-demand capacity and resources, and can be provisioned in just a few minutes.<\/p>\n<h2>Threat actors<\/h2>\n<p>\u201cFor threat actors, the benefits are even more compelling because they will often use stolen credit card details and false identities to pay for the services. This makes the perpetrators almost impossible to trace, even though providers such as <a href=\"https:\/\/aws.amazon.com\/forms\/report-abuse\">Amazon<\/a> are taking strong action against misuse, and asking users to report any suspected abuse of their services.\u201d<\/p>\n<p>To protect against DDoS attacks launched using public cloud services, blocking traffic from these services is not an option for many organisations because they will already be using the public cloud as part of their own IT infrastructures.<\/p>\n<h2>Data traffic<\/h2>\n<p>Instead, organisations should analyse in detail the communication between public cloud services and their own network, and monitor for malicious or unwanted traffic.<\/p>\n<p>Ongoing analysis of data traffic, using machine-learning techniques, enables legitimate traffic to be profiled and fingerprinted, so that any changes can be detected quickly and reliably.<\/p>\n<p>The malicious traffic can then be filtered out in a granular manner before it can impact the organisation\u2019s business, without blocking legitimate traffic.<\/p>\n<p>Written from press release by Leah Alger<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Data from Link11\u2019s Security Operation Center (LSOC) shows that the cloud services AWS, Microsoft Azure and Alibaba were used in 25% of recent DDoS attacks<\/p>\n","protected":false},"author":12,"featured_media":13940,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","pmpro_default_level":"","footnotes":""},"categories":[1158],"tags":[1014,181,806,771,3186,769,2953,180,3184,3183,3185,1670,1543,1042,3182],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>DDoS attackers increasingly abuse public cloud services<\/title>\n<meta name=\"description\" content=\"Data from Link11\u2019s Security Operation Center (LSOC) shows that the cloud services AWS, Microsoft Azure and Alibaba were used in 25% of recent DDoS attacks\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DDoS attackers increasingly abuse public cloud services\" \/>\n<meta property=\"og:description\" content=\"Data from Link11\u2019s Security Operation Center (LSOC) shows that the cloud services AWS, Microsoft Azure and Alibaba were used in 25% of recent DDoS attacks\" \/>\n<meta property=\"og:url\" content=\"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/\" \/>\n<meta property=\"og:site_name\" content=\"DevOps Online North America\" \/>\n<meta property=\"article:published_time\" content=\"2018-09-11T08:00:56+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-09-10T13:25:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/devopsnews.online\/wp-content\/uploads\/2018\/09\/iStock-467571571.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"673\" \/>\n\t<meta property=\"og:image:height\" content=\"519\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Leah Alger\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DevOpsAmerica\" \/>\n<meta name=\"twitter:site\" content=\"@DevOpsAmerica\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Leah Alger\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/\"},\"author\":{\"name\":\"Leah Alger\",\"@id\":\"https:\/\/devopsnews.online\/#\/schema\/person\/d705a7d7c56b625b482e9b13a8e49a2c\"},\"headline\":\"DDoS attackers increasingly abuse public cloud services\",\"datePublished\":\"2018-09-11T08:00:56+00:00\",\"dateModified\":\"2018-09-10T13:25:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/\"},\"wordCount\":425,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/devopsnews.online\/#organization\"},\"image\":{\"@id\":\"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/devopsnews.online\/wp-content\/uploads\/2018\/09\/iStock-467571571.jpg\",\"keywords\":[\"Alibaba\",\"Amazon\",\"Amazon Web Services\",\"AWS\",\"botnets\",\"DDOS\",\"DDoS attacks\",\"Google\",\"IT infrastructures\",\"Link11\",\"LSOC\",\"machine learning\",\"microsoft azure\",\"public cloud\",\"public cloud services\"],\"articleSection\":[\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/\",\"url\":\"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/\",\"name\":\"DDoS attackers increasingly abuse public cloud services\",\"isPartOf\":{\"@id\":\"https:\/\/devopsnews.online\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/devopsnews.online\/wp-content\/uploads\/2018\/09\/iStock-467571571.jpg\",\"datePublished\":\"2018-09-11T08:00:56+00:00\",\"dateModified\":\"2018-09-10T13:25:57+00:00\",\"description\":\"Data from Link11\u2019s Security Operation Center (LSOC) shows that the cloud services AWS, Microsoft Azure and Alibaba were used in 25% of recent DDoS attacks\",\"breadcrumb\":{\"@id\":\"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/#primaryimage\",\"url\":\"https:\/\/devopsnews.online\/wp-content\/uploads\/2018\/09\/iStock-467571571.jpg\",\"contentUrl\":\"https:\/\/devopsnews.online\/wp-content\/uploads\/2018\/09\/iStock-467571571.jpg\",\"width\":673,\"height\":519,\"caption\":\"alcide\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/devopsnews.online\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DDoS attackers increasingly abuse public cloud services\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/devopsnews.online\/#website\",\"url\":\"https:\/\/devopsnews.online\/\",\"name\":\"DevOps Online North America\",\"description\":\"by 31 Media Ltd.\",\"publisher\":{\"@id\":\"https:\/\/devopsnews.online\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/devopsnews.online\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/devopsnews.online\/#organization\",\"name\":\"DevOps Online North America\",\"url\":\"https:\/\/devopsnews.online\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/devopsnews.online\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/devopsnews.online\/wp-content\/uploads\/2020\/03\/DevOpsOnline_email.png\",\"contentUrl\":\"https:\/\/devopsnews.online\/wp-content\/uploads\/2020\/03\/DevOpsOnline_email.png\",\"width\":198,\"height\":64,\"caption\":\"DevOps Online North America\"},\"image\":{\"@id\":\"https:\/\/devopsnews.online\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/DevOpsAmerica\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/devopsnews.online\/#\/schema\/person\/d705a7d7c56b625b482e9b13a8e49a2c\",\"name\":\"Leah Alger\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/devopsnews.online\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/0ac9e809e8ffafd8330210900bac04c0?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/0ac9e809e8ffafd8330210900bac04c0?s=96&d=mm&r=g\",\"caption\":\"Leah Alger\"},\"url\":\"https:\/\/devopsnews.online\/author\/leah-alger\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"DDoS attackers increasingly abuse public cloud services","description":"Data from Link11\u2019s Security Operation Center (LSOC) shows that the cloud services AWS, Microsoft Azure and Alibaba were used in 25% of recent DDoS attacks","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/","og_locale":"en_US","og_type":"article","og_title":"DDoS attackers increasingly abuse public cloud services","og_description":"Data from Link11\u2019s Security Operation Center (LSOC) shows that the cloud services AWS, Microsoft Azure and Alibaba were used in 25% of recent DDoS attacks","og_url":"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/","og_site_name":"DevOps Online North America","article_published_time":"2018-09-11T08:00:56+00:00","article_modified_time":"2018-09-10T13:25:57+00:00","og_image":[{"width":673,"height":519,"url":"https:\/\/devopsnews.online\/wp-content\/uploads\/2018\/09\/iStock-467571571.jpg","type":"image\/jpeg"}],"author":"Leah Alger","twitter_card":"summary_large_image","twitter_creator":"@DevOpsAmerica","twitter_site":"@DevOpsAmerica","twitter_misc":{"Written by":"Leah Alger","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/#article","isPartOf":{"@id":"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/"},"author":{"name":"Leah Alger","@id":"https:\/\/devopsnews.online\/#\/schema\/person\/d705a7d7c56b625b482e9b13a8e49a2c"},"headline":"DDoS attackers increasingly abuse public cloud services","datePublished":"2018-09-11T08:00:56+00:00","dateModified":"2018-09-10T13:25:57+00:00","mainEntityOfPage":{"@id":"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/"},"wordCount":425,"commentCount":0,"publisher":{"@id":"https:\/\/devopsnews.online\/#organization"},"image":{"@id":"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/#primaryimage"},"thumbnailUrl":"https:\/\/devopsnews.online\/wp-content\/uploads\/2018\/09\/iStock-467571571.jpg","keywords":["Alibaba","Amazon","Amazon Web Services","AWS","botnets","DDOS","DDoS attacks","Google","IT infrastructures","Link11","LSOC","machine learning","microsoft azure","public cloud","public cloud services"],"articleSection":["Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/","url":"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/","name":"DDoS attackers increasingly abuse public cloud services","isPartOf":{"@id":"https:\/\/devopsnews.online\/#website"},"primaryImageOfPage":{"@id":"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/#primaryimage"},"image":{"@id":"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/#primaryimage"},"thumbnailUrl":"https:\/\/devopsnews.online\/wp-content\/uploads\/2018\/09\/iStock-467571571.jpg","datePublished":"2018-09-11T08:00:56+00:00","dateModified":"2018-09-10T13:25:57+00:00","description":"Data from Link11\u2019s Security Operation Center (LSOC) shows that the cloud services AWS, Microsoft Azure and Alibaba were used in 25% of recent DDoS attacks","breadcrumb":{"@id":"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/#primaryimage","url":"https:\/\/devopsnews.online\/wp-content\/uploads\/2018\/09\/iStock-467571571.jpg","contentUrl":"https:\/\/devopsnews.online\/wp-content\/uploads\/2018\/09\/iStock-467571571.jpg","width":673,"height":519,"caption":"alcide"},{"@type":"BreadcrumbList","@id":"https:\/\/devopsnews.online\/ddos-attackers-increasingly-abuse-public-cloud-services\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/devopsnews.online\/"},{"@type":"ListItem","position":2,"name":"DDoS attackers increasingly abuse public cloud services"}]},{"@type":"WebSite","@id":"https:\/\/devopsnews.online\/#website","url":"https:\/\/devopsnews.online\/","name":"DevOps Online North America","description":"by 31 Media Ltd.","publisher":{"@id":"https:\/\/devopsnews.online\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/devopsnews.online\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/devopsnews.online\/#organization","name":"DevOps Online North America","url":"https:\/\/devopsnews.online\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/devopsnews.online\/#\/schema\/logo\/image\/","url":"https:\/\/devopsnews.online\/wp-content\/uploads\/2020\/03\/DevOpsOnline_email.png","contentUrl":"https:\/\/devopsnews.online\/wp-content\/uploads\/2020\/03\/DevOpsOnline_email.png","width":198,"height":64,"caption":"DevOps Online North America"},"image":{"@id":"https:\/\/devopsnews.online\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/DevOpsAmerica"]},{"@type":"Person","@id":"https:\/\/devopsnews.online\/#\/schema\/person\/d705a7d7c56b625b482e9b13a8e49a2c","name":"Leah Alger","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/devopsnews.online\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/0ac9e809e8ffafd8330210900bac04c0?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0ac9e809e8ffafd8330210900bac04c0?s=96&d=mm&r=g","caption":"Leah Alger"},"url":"https:\/\/devopsnews.online\/author\/leah-alger\/"}]}},"_links":{"self":[{"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/posts\/13939"}],"collection":[{"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/comments?post=13939"}],"version-history":[{"count":0,"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/posts\/13939\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/media\/13940"}],"wp:attachment":[{"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/media?parent=13939"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/categories?post=13939"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devopsnews.online\/wp-json\/wp\/v2\/tags?post=13939"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}