Ixia BreakingPoint DoS Evaluation Service Know How Your Applications and Infrastructure Will Perform Under Denial of Service (DoS) Botnet-driven denial of service (DoS) and distributed denial of service (DDoS) attacks have become a persistent and costly threat to business operations. The first step in hardening resiliency against these threats is to know exactly how they will affect your applications, networks, and data center infrastructures. The Ixia BreakingPoint DoS Evaluation Service is the only fast, always-current, and cost-effective way to understand how application and infrastructure targets will perform under botnetdriven DoS, DDoS, and related attacks. In less than a week, BreakingPoint will simulate, measure, and report on the impact of a range of current attacks on your selected IT targets, which may include applications, network security devices, a collection of devices, a representative wide-area network (WAN), or a data center infrastructure. This service includes setup, configuration, execution, and measurement of the impact of attacks, including RTP floods, ICMP pings, UDP floods, TCP SYN floods, and others. A BreakingPoint security consultant will customize a series of simulations that include application, attack, and malformed traffic to assess the performance, security, and stability of targets. The consultant will then provide real-time statistics and a full report with granular details and insight into the resiliency of IT infrastructure and application targets while facing a DoS or DDoS attack. Advantages •Assessment of IT target performance and capacity under DoS, DDoS, and related attacks •Predictive, measurable, and actionable insight into resiliency •Results in less than a week at a fixed price •Fewer man-hours and lower cost •Reduced risks of downtime and performance issues •Best practices from leading SaaS, mobile commerce, e-commerce, and financial services customers •Full knowledge and methodology transfer Sample of Attacks Unsolicited notifications Incomplete session setup MGCP notification SIP invite/register ISAKMP notification TCP SYN flood RTP flood SCTP init Lack of rate limiting responses DHCP discover ICMP pings 1-N amplification UDP flood Multicast flood (MDNS) TCP full connection flood Broadcast floods (ARP, ICMP) •Will target systems support a minimum threshold of users when under attack? Application flood NTP monlist amplification attack •How will application response time and user experience change under a DoS attack? Broadcast pings The BreakingPoint DoS Evaluation Service delivers comprehensive botnet-driven DoS, DDoS, and botnet simulation and assessment for fast, accurate answers to questions such as: •How will a DoS attack affect network-based services? •Will certain devices or configurations amplify the effect of a DoS attack? •How will remote services perform? •Are DoS mitigation measures effective? URL flood MSSQL echo packets Ixia BreakingPoint DoS Evaluation Service DoS Evaluation Advantages Only BreakingPoint consultants are armed with best practices from Global 2000 and leading SaaS companies, as well as the power of Internet-scale simulation, application fuzzing, and advanced security research. Within a week, your consultant will put these capabilities to work to provide you with granular performance data and full knowledge transfer. With this insight you will: •Understand the performance of applications, infrastructures, and defenses under a range of DoS and DDoS attacks. •Have the measurable insight to architect effective DDoS mitigation strategies. •Reduce the risk of performance degradation or service interruption. •Learn best practices in DoS and DDoS simulation and resiliency measurement to standardize future assessments. •Remain resilient with ongoing scheduled evaluations. BreakingPoint DoS Evaluation Service Deliverable Project Scope Definition Define objectives and project scope document Interview Designate target devices and performance objectives Document Simulation Specification and Setup Produce program tracking documents Timeline Design program-specific simulations (traffic profiles) Test Plan Set up simulation in designated lab On-Site Evaluation Simulation Execution and Results Assemble, debug, and run baseline simulation on-site Execution Establish result logs in accordance with project scope Results Reports Compile results and complete tracking documents Results Documentation Evaluation and Presentation of Results Report and prioritize simulation results Expert Analysis Consultation to review results and next steps Recommendations Working with BreakingPoint A BreakingPoint DoS Evaluation can be conducted as a onetime project providing the advance insight you need to mitigate the risks of DoS attacks. Or, you can take advantage of our yearly subscription service, which includes ongoing quarterly assessments to maintain resiliency as your environment changes. Get Started Now For predictive insight into your resiliency against botnet-driven DoS and DDoS attacks, turn to BreakingPoint. Contact us now at www.ixiacom.com/breakingpoint Contact BreakingPoint 1.866.352.6691 U.S. Toll Free www.ixiacom.com/breakingpoint BreakingPoint Global Headquarters 3900 North Capital of Texas Highway Austin, TX 78746 email: salesinfo@breakingpoint.com tel: 512.821.6000 toll free: 866.352.6691 www.ixiacom.com/breakingpoint PN: 915-6723-01 Rev A, September 2012. This material is for informational purposes only and subject to change without notice. It describes Ixia’s present plans to develop and make available to its customers certain products, features and functionality. Ixia is only obligated to provide those deliverables specifically included in a written agreement between Ixia and the customer.