Adaptive DDoS Protection for Arbor Edge Defense (AED) has been introduced by NETSCOUT SYSTEMS, a top supplier of cybersecurity, performance management, and DDoS attack prevention solutions, to shield ISPs and businesses from DNS water torture attacks. The first half of 2023 saw a 353% surge in Domain Name System (DNS) water torture attacks, overwhelming Authoritative DNS server resources and disrupting vital DNS services, according to the NETSCOUT DDoS Threat Intelligence Report.
According to John Grady, principal of Enterprise Strategy Group, “DNS water torture DDoS attacks have been around since 1997, yet many organizations still struggle to efficiently identify and mitigate them.” In order to slow down and prevent legitimate requests from receiving a response, these attacks send erroneous requests to an Authoritative DNS server. Because DNS is so widely used, security teams cannot simply block this traffic without also possibly affecting legitimate requests, and they can easily misidentify an attack as a performance problem. With the help of NETSCOUT’s Adaptive DDoS Protection, which automatically adjusts to modifications in DNS server setup, AED is able to recognize and lessen these attacks.
One of the various assault strategies adversaries can use to knock down DNS infrastructure is DNS water torture. Adaptive DDoS Protection for AED from NETSCOUT defends against numerous DDoS attack methods at scale by:
- · Automatically identifying valid hostnames for every domain by continuously examining DNS query and reply packets
- • Adjusting to modifications in attack methods and DNS server settings to avoid blocking valid domains
- · Using intelligent query-by-query blocking to stop DNS water torture IP sources
With the help of real-time global DDoS attack threat intelligence, decades of DDoS mitigation experience, and unparalleled visibility into over 50% of all internet traffic, Adaptive DDoS Protection provides SOC teams with a scalable, always-on, stateless packet processing solution that can automatically detect, adapt to, and mitigate dynamic DDoS attacks.
According to Scott Iekel-Johnson, AVP of DDoS and Threat Intelligence at NETSCOUT, “Adaptive DDoS Protection for AED offers customers a unique hybrid multi-layer DDoS defence architecture.” “To thwart modern-day attacks and advanced threats, it can learn and filter millions of legitimate hostnames and thousands of domains backed by our ATLAS® Intelligence Feed (AIF).” Visit our website to find out more about Adaptive DDoS Protection for AED.