Johannesburg, 02 Jul 2014
Disruptive cyber attacks are becoming more effective at breaching security defences, causing major disruption and sometimes bringing down organisations for whole working days, according to a new global study from BT.
The research reveals that 41% of organisations globally were hit by distributed denial of service (DDoS) attacks over the past year, with three quarters of those (78%) targeted twice or more in the year.
DDoS attacks are seen as a key concern by two-thirds of South African organisations (66%). This is higher even than the global average (58%).
The new study explores attitudes to and preparedness for DDoS attacks of IT managers from organisations in eleven countries and regions around the world. It reveals that while the majority of South African organisations (58%) have a response plan in place should a DDoS attack occur, only one-fifth are convinced that they have sufficient resources in place to counteract an attack (20%).
DDoS attacks can cause major disruption for organisations; they can take down an organisation's Web site, overwhelm a datacentre or generally cause networks to grind to a halt and become unusable. They are also increasingly becoming more complex and difficult for organisations to fend off.
Almost six in 10 (59%) of those polled agree that DDoS attacks are becoming more effective at subverting their organisation's IT security measures. Attackers are often adopting hybrid, or multi-vector, attack tactics which involve attacks through multiple platforms. These have increased by two fifths (41%) during the past year.
Multi-vector attacks pose increased complexity and risk as they involve multiple attack methods deployed simultaneously. These often require a dedicated mitigation team to track and combat the threat across multiple fronts, as automated systems are less likely to be able to offer adequate protection.
Mark Hughes, president of BT Security, explained: "DDoS attacks have evolved significantly in the last few years and are now a legitimate business concern. They can have a damaging effect on revenues and send an organisation into full crisis mode. Reputations, revenue and customer confidence are on the line following a DDoS attack. Finance, e-commerce companies and retailers in particular suffer when their Web sites or businesses are targeted."
Unsurprisingly, organisations see an increase in customer complaints when their network systems go down after a DDoS attack. Respondents said customer complaints and queries jumped by an average of 36%.
The impact that DDoS attacks can have on organisations is felt in the length of time it has taken organisations to recover from their most severe attack. On average, organisations take 12 hours to fully recover from an especially powerful attack - longer than an entire working day. In South Africa, the vast majority of IT decision makers (83%) admit that DDoS attacks have bought down their systems for more than six hours - almost a full working day.
Mark Hughes adds: "The most efficient way to protect against the attack is raising awareness among employees and partnering with a trusted and capable supplier. At BT, we are working with leading global organisations to help them mitigate risks and put in place proactive defences. It is only when security is optimised that organisations are able to harness the possibilities of today's connected world."
Please click to view: The BT Security DDoS Summary
Share