DDos Attacks and Web Threats: How to Protect Your Site & Information

© 2013 Imperva, Inc. All rights reserved.

DDos Attacks and Web Threats: How to Protect Your Site & Information

Tina ShawAccount [email protected]

mailto:[email protected]


Low-Orbit Ion Canon (LOIC) Purpose - DDoS Windows desktop application, coded in C# UDP/TCP/HTTP flooding

Hacking Tools


Hacker Forum Discussion Topics

DoS is Another Tool in the Hacker Toolbox

16%

22%

19%10%

12%

12% 9%

spamdos/ddosSQL Injectionzero-dayshell codebrute-forceHTML Injection

Source: Imperva. Covers July 2010 -July 2011 across 600,000 discussions


A 100GB attack (Sept 24th)

• Featured in eWeek on October 1, 2013• The attack's load was distributed across our +350Gbps network.

(each color represents a different data center)

© 2013 Imperva, Inc. All rights reserved. Confidential

Imperva Incapsula Overview

21

Incapsula helps Website owners…


Imperva Incapsula

Simplicity

Flexibility

Versatility

Imperva Incapsula Overview


Versatility “The idea of recognizing your strengths and using them in as versatile a way as you can is cool to me.” - Frank Ocean

Imperva’s

Tina^

© 2013 Imperva, Inc. All rights reserved. Confidential24

Imperva Incapsula Versatility

By routing Website traffic through Incapsula, bad traffic is removed and good traffic is accelerated

Web Application Firewall (WAF)Distributed Denial of Service (DDOS)Distributed Denial of Service (DDOS)Load BalancingLoad BalancingContent Delivery Network (CDN)


Imperva Incapsula is Deployed as a Reverse Proxy Network

360° Global Threat Detection & Analysis:

Enables early detection of threats and attack vectors and instant application of protection rules across the entire proxy network

© 2013 Imperva, Inc. All rights reserved. Confidential26

Incapsula’s Global Content Delivery Network

Datacenters• Currently 15 Datacenters

USA (Ashville NC, Ashburn VA, Los Angles CA, San Jose CA, Chicago IL, Miami FL, Dallas TX, New York NY), London, Singapore, Israel, Amsterdam, Tokyo, Frankfurt, Sydney

• Plans for another 4 Datacenters Toronto, Hong Kong, Sao Paulo, and Milan

Data Across Borders• Customer data can be locked into (or out of) specific countries


Simplicity

“Life is really simple, but we insist on making it complicated.” - ConfusiusSecurity Tina Shaw!


The Activation Email

20 sec

Elapsed time


Creating a User Account

40 sec

Elapsed time

Confidential30 © 2013 Imperva, Inc. All rights reserved.

Logging into Incapsula and adding a website

60 sec

Elapsed time


Incapsula Automatically Gathers Site Data

1 min 5 sec

Elapsed time


Changing DNS Settings

1 min 15 sec

Elapsed time


Getting Lost in Go Daddy’s Horrible UI

6 min 15 sec

Elapsed time


Updating DNS Records

8 min 15 sec

Elapsed time


Completing Incapsula’s Setup

8 min 45 sec

Elapsed time


The Website is Protected

9 Minutes- 5 Minutes4~5 Minutes

Elapsed time

37 © 2013 Imperva, Inc. All rights reserved.

Dashboard - Traffic

Confidential


Dashboard - Traffic


Dashboard - Security


Dashboard - Performance


Dashboard – Datacenter Response Time


Dashboard – Recent Updates

- CONFIDENTIAL -43 © 2013 Imperva, Inc. All rights reserved.

Visits


Visits - More


Visits – Add to Whitelist


Settings - General


Settings – Login Protect


Settings - Performance


Settings - Notifications


Settings - Security


Settings - WAF


Settings – WAF Whitelist


Settings - Permissions


Flexible

“I like forms that are flexible, that can let you feel creative.” -John Scofield

Security Products

Tina Shaw!

^


Imperva Incapsula Customer Sample

Confidential59

http://www.gemoney.com.au/en/index.html

http://www.gemoney.com.au/en/index.html

http://www.trident.edu/

http://www.trident.edu/

http://www.webandflo.com/index.php

http://www.webandflo.com/index.php

http://michigan.aaa.com/



http://www.denhelder.nl/index.html

http://www.shellvacationsclub.com/index.jsp

http://www.poshtots.com/

http://www.livepositively.com/?wt.mc_id=CCSLP


Incapsula Makes Security Simple

Imperva Incapsula

Simplicity

Flexibility

Versatility


Questions?

DDos Attacks and Web Threats: How to Protect Your Site & Information

Technology

Transcript of DDos Attacks and Web Threats: How to Protect Your Site & Information