DoS Evaluation Services

advertisement
Ixia BreakingPoint DoS Evaluation Service
Know How Your Applications and Infrastructure
Will Perform Under Denial of Service (DoS)
Botnet-driven denial of service (DoS) and distributed denial of service (DDoS) attacks have become a persistent and
costly threat to business operations. The first step in hardening resiliency against these threats is to know exactly how
they will affect your applications, networks, and data center infrastructures.
The Ixia BreakingPoint DoS Evaluation Service is the only fast,
always-current, and cost-effective way to understand how
application and infrastructure targets will perform under botnetdriven DoS, DDoS, and related attacks. In less than a week,
BreakingPoint will simulate, measure, and report on the impact
of a range of current attacks on your selected IT targets, which
may include applications, network security devices, a collection
of devices, a representative wide-area network (WAN), or a data
center infrastructure.
This service includes setup, configuration, execution, and
measurement of the impact of attacks, including RTP floods, ICMP
pings, UDP floods, TCP SYN floods, and others. A BreakingPoint
security consultant will customize a series of simulations that
include application, attack, and malformed traffic to assess the
performance, security, and stability of targets. The consultant
will then provide real-time statistics and a full report with granular
details and insight into the resiliency of IT infrastructure and
application targets while facing a DoS or DDoS attack.
Advantages
•Assessment of IT target performance and capacity under
DoS, DDoS, and related attacks
•Predictive, measurable, and actionable insight into
resiliency
•Results in less than a week at a fixed price
•Fewer man-hours and lower cost
•Reduced risks of downtime and performance issues
•Best practices from leading SaaS, mobile commerce,
e-commerce, and financial services customers
•Full knowledge and methodology transfer
Sample of Attacks
Unsolicited notifications
Incomplete session setup
MGCP notification
SIP invite/register
ISAKMP notification
TCP SYN flood
RTP flood
SCTP init
Lack of rate limiting responses
DHCP discover
ICMP pings
1-N amplification
UDP flood
Multicast flood (MDNS)
TCP full connection flood
Broadcast floods (ARP, ICMP)
•Will target systems support a minimum threshold of users
when under attack?
Application flood
NTP monlist amplification attack
•How will application response time and user experience
change under a DoS attack?
Broadcast pings
The BreakingPoint DoS Evaluation Service delivers comprehensive
botnet-driven DoS, DDoS, and botnet simulation and assessment
for fast, accurate answers to questions such as:
•How will a DoS attack affect network-based services?
•Will certain devices or configurations amplify the effect of a
DoS attack?
•How will remote services perform?
•Are DoS mitigation measures effective?
URL flood
MSSQL echo packets
Ixia BreakingPoint DoS Evaluation Service
DoS Evaluation Advantages
Only BreakingPoint consultants are armed with best practices
from Global 2000 and leading SaaS companies, as well as
the power of Internet-scale simulation, application fuzzing, and
advanced security research. Within a week, your consultant
will put these capabilities to work to provide you with granular
performance data and full knowledge transfer. With this insight
you will:
•Understand the performance of applications, infrastructures,
and defenses under a range of DoS and DDoS attacks.
•Have the measurable insight to architect effective DDoS
mitigation strategies.
•Reduce the risk of performance degradation or service
interruption.
•Learn best practices in DoS and DDoS simulation and
resiliency measurement to standardize future assessments.
•Remain resilient with ongoing scheduled evaluations.
BreakingPoint DoS Evaluation Service
Deliverable
Project Scope Definition
Define objectives and project scope document
Interview
Designate target devices and performance
objectives
Document
Simulation Specification and Setup
Produce program tracking documents
Timeline
Design program-specific simulations (traffic profiles)
Test Plan
Set up simulation in designated lab
On-Site Evaluation
Simulation Execution and Results
Assemble, debug, and run baseline simulation
on-site
Execution
Establish result logs in accordance with project
scope
Results Reports
Compile results and complete tracking documents
Results Documentation
Evaluation and Presentation of Results
Report and prioritize simulation results
Expert Analysis
Consultation to review results and next steps
Recommendations
Working with BreakingPoint
A BreakingPoint DoS Evaluation can be conducted as a onetime project providing the advance insight you need to mitigate
the risks of DoS attacks. Or, you can take advantage of our
yearly subscription service, which includes ongoing quarterly
assessments to maintain resiliency as your environment changes.
Get Started Now
For predictive insight into your resiliency against botnet-driven DoS and DDoS attacks, turn to BreakingPoint.
Contact us now at www.ixiacom.com/breakingpoint
Contact BreakingPoint
1.866.352.6691 U.S. Toll Free
www.ixiacom.com/breakingpoint
BreakingPoint Global Headquarters
3900 North Capital of Texas Highway
Austin, TX 78746
email: salesinfo@breakingpoint.com
tel: 512.821.6000
toll free: 866.352.6691
www.ixiacom.com/breakingpoint
PN: 915-6723-01 Rev A, September 2012. This material is for informational purposes only and subject to change without notice. It describes Ixia’s present plans to develop and
make available to its customers certain products, features and functionality. Ixia is only obligated to provide those deliverables specifically included in a written agreement between
Ixia and the customer.
Download