Measuring the Adoption of DDoS Protection Services

Jonker, Mattijs;Sperotto, Anna;van Rijswijk-Deij, Roland;Sadre, Ramin;Pras, Aiko
(2016) ACM Internet Measurement Conference (IMC) — Location: Santa Monica, California

Files

No attached file found for this publication.

Details

Authors
  • Jonker, Mattijs
    Author
  • Sperotto, Anna
    Author
  • van Rijswijk-Deij, Roland
    Author
  • Sadre, RaminUCLouvain
    Author
  • Pras, Aiko
    Author
Abstract
Distributed Denial-of-Service (DDoS) attacks have seen a steady rise in popularity in the last 5 years, their intensity ranging from mere nuisance to severe. The increased number of attacks, combined with the loss of revenue for the targets, has given rise to a market for DDoS Protection Service (DPS) providers, to whom victims can, by using traffic redirection, outsource the cleansing of their traffic. In this paper, we investigate the adoption of cloud-based DPSs worldwide. We focus on three of the leading DPS, namely CloudFlare, Imperva and Verisign. Our outlook on the adoption of DPSs is based on DNS measurements, which allow us, for a give domain name, to verify if traffic diversion towards a DPS is in place. We do so by analyzing a long-term, large-scale data set consisting of more than 50% of all names in the global DNS name space, in daily snapshots, over a period of 14 months. Our results show that DPS adoption has grown by a factor between 1.5 and 2 in our measurement period, a prominent trend when compared with the overall expansion of the name space. Our study also reveals that adoption is often lead by big players, e.g., large Web hosters, which activate or deactivate DDoS protection for millions of domain names at once.
Affiliations

Citations

Jonker, M., Sperotto, A., van Rijswijk-Deij, R., Sadre, R., & Pras, A. (2016). Measuring the Adoption of DDoS Protection Services. Proceedings of the 2016 ACM Internet Measurement Conference. Published. ACM Internet Measurement Conference (IMC), Santa Monica, California. https://doi.org/10.1145/2987443.2987487