[Q4 2014]

akamai.com

= compared to [Q 3 2014]

90% increase in total DDoS attacks

54% decrease in average attack bandwidth

121% increase in infrastructure layer attacks

16% decrease in application (Layer 7) attacks

31% increase in average attack duration

38% increase in multi-vector attacks
[Download the Q4 2014 Global DDoS Attack Report for
supporting data and analysis]

2 / [The State of the Internet] / Security (Q4 2014)

= multi-vector campaigns compared to [Q 4 2013]

60
50

53.26
46.24

44.14

40
30
20
10
0
Q4 2013

Q3 2014

Q4 2014

Figure 1: While the number of multi-vector attacks has surged the past two quarters, the percentage of multivector campaigns has continued to hover around the 50 percent mark

3 / [The State of the Internet] / Security (Q4 2014)

= peak bandwidth compared to [Q 4 2013]

16
14
12
10
8
6
4
2
0

13.93

6.41

4.21

Q4 2013

Q3 2014

Q4 2014

Figure 2: Average peak bandwidth has dropped since last quarter, but remains higher than it was a year ago

4 / [The State of the Internet] / Security (Q4 2014)

= distribution of DDoS attack vectors

Figure 3: Infrastructure attacks remained popular in Q4, making up nearly 90 percent of all attack vectors

5 / [The State of the Internet] / Security (Q4 2014)

= comparison of attack vectors since Q 4 [2013]

In late November 2014, a new attack vector, XMAS-DDoS with
Christmas tree packets, was observed for the first time.
/ This vector is featured in the Attack Spotlight of the Q4 2014 Security Report.

Compared to Q3, SSDP accounted for a significant 214 percent

increase in number of attacks
/ SSDP was a newly observed attack in Q3

/ In Q4 2014, Akamai mitigated a 106 Gpbs SSDP-only DDoS attack

NTP reflection increased by 181 percent compared to Q3, an indicator of

the larger number of DDoS attacks overall in Q4
/ DDoS-for-hire sites, a market with growing momentum, were a source for NTP
reflection attacks this quarter

6 / [The State of the Internet] / Security (Q4 2014)

= targeted industries

Figure 4: The gaming industry bore the brunt of DDoS attacks in Q4, driven by a surge in attack activity at the end
of December

7 / [The State of the Internet] / Security (Q4 2014)

= total attacks per week [Q 4 2014 vs Q 4 2013]

Figure 5: Weekly DDoS attacks surged in December 2014 compared to December 2013, fueled by attacks in the
gaming industry

8 / [The State of the Internet] / Security (Q4 2014)

= Q 4 2014 global attack report

Download the Q4 2014 State of the Internet Security Report
The Q4 2014 report covers:
/ Analysis of DDoS attack trends
/ Breakdown of average Gbps/Mbps statistics
/ Year-over-year and quarter-by-quarter analysis
/ Types and frequency of application-layer attacks
/ Types and frequency of infrastructure attacks
/ Trends in attack frequency, size and sources
/ Where and when DDoSers launch attacks
/ Case study and analysis

9 / [The State of the Internet] / Security (Q4 2014)

= about stateoftheinternet.com

StateoftheInternet.com, brought to you by Akamai, serves as the home for

content and information intended to provide an informed view into online

connectivity and cybersecurity trends as well as related metrics, including

Internet connection speeds, broadband adoption, mobile usage, outages,
and cyber-attacks and threats.
Visitors to www.stateoftheinternet.com can find current and archived
versions of Akamais State of the Internet (Connectivity and Security)
reports, the companys data visualizations, and other resources designed to
put context around the ever-changing Internet landscape.

10 / [The State of the Internet] / Security (Q4 2014)