1. Hemant Jain’s 10 Ways To Handle Distributed Denial of Service (DDoS) Attacks

2. Your Network Visibility 1. INCREASE Get Granular View of Your Network Have an ability to figure out the Sources, Destinations, Connections, Protocols, Ports, …

3. Your Network 2. Partition Segregate your Business Segments Isolate segments, so that attack on one segment does not affect the others

4. Your Network 3. Contain Prevent Proliferation Of Attacks Attacks have a tendency to spiral.

5. Performance 4. Maintain Attackers have a tendency to test your spirit. Avoid placing devices that cannot handle your peak bandwidth

6. From Attacks – Quickly 5. Recover Have safety valves that trigger. Close multiple flood gets when there is too much to handle.

7. After Attacks 6. Continue Ensure seamless operation under DDoS attacks or equipment failure Make sure you have a recovery plan.

8. Check IDs to block spoofing 7. Revalidate Allow only Legitimate IP addresses and Non-dark addresses during Flood Make sure your device maintains a table of legitimate IP addresses

9. Your Network granularly 8. Control Rate limit granularly so that no single network parameter exceeds its norm Have an ability to throttle Sources, Destinations, Connections, Protocols, Ports, …on a per business segment basis

10. With Network Service Provider 9. Cooperate Take help when your attacks exceed your pipe. Your DDoS mitigation appliance must send attack details to the Service Provider. They can block specific source blocks or regions to reduce your pain.

11. From Past Attacks 10. Learn Analyze past attack reports. Plug holes in your network. Prevention is better than cure.