Explore


Exploring the business and technology issues our customers care about

DDoS Mitigation


DDoS attacks and internet volatility are on the rise.

Distributed Denial of Service (DDoS) attacks are a top concern for every IT organization. Regardless of your company’s size or industry, a DDoS attack can tarnish your reputation and impact your bottom line. DDoS attacks are easier to initiate and more difficult to mitigate than ever. Today any cybercriminal with internet access can use “attack-for-hire” groups to execute assaults for under $5. And with the advent of the Internet of Things (IoT), hackers are exploiting connected devices like webcams to launch massive-scale attacks.

DNS is a common target for DDoS attacks. Some attackers may try to overwhelm your DNS servers directly. Others may try to exploit your DNS systems to launch attacks on other elements of your IT infrastructure or on another company’s infrastructure. Either way, DNS-based DDoS attacks can impair your online applications and services, and disrupt business. The cost of a DDoS attack can quickly reach up to million dollars an hour in lost revenue and productivity for the average size company.

DDoS attacks increasing in size and complexity


0%

Increase in DDoS attacks from 2015 to 2016

0%

Increase in infrastructure layer DDoS attacks from 2015 to 2016

0%

Increase in attacks > 100 Gbps from 2015 to 2016

What is DDoS?


Distributed Denial of Service (DDoS) attacks are a flood of requests for service to DNS networks that prevent connections from legitimate users to legitimate sites and services.

What is DDoS Mitigation?


DDoS Mitigation is a service that allows organizations to isolate and avoid artificial traffic flooding from DDoS attacks so that legitimate traffic can get through.

Dyn's View


Security experts agree that online security and threat mitigation requires a layered approach. No one solution such as a firewall, intrusion prevention system or cloud-based scrubbing service can fully protect your online infrastructure against today’s increasingly large and sophisticated attacks. You can significantly improve your security posture by trusting the operation of your DNS infrastructure to a battle-proven managed DNS service provider.

Best-of-breed managed DNS providers operate resilient global anycast networks, employ full-time security experts, and take special precautions to proactively thwart and mitigate DDoS attacks. They do this on an almost daily basis.

Additionally, adding a secondary DNS service to your existing DNS solution can harden your defenses and optimize availability. If your primary DNS service is attacked or suffers an outage, the secondary service will keep your online business up and running at peak performance.

How Dyn Helps

As a network operator running one of the world’s largest and most dependable DNS networks, Dyn sees and successfully mitigates multiple DDoS attacks every week. We do this as a core part of our service for every managed DNS customer, rather than an expensive add-on service.

Global Resiliency and Scalability

Dyn’s global anycast network spans 18 data centers across five continents and leverages a mix of Tier 1 transit providers at each PoP. By maximizing our attack surface we can better absorb and mitigate threats. We also employ advanced pooling strategies to segregate customers and isolate attacks.

Round-the-Clock Monitoring and Remediation

Our in-house DNS and security experts proactively manage our network 24x7x365. We often detect and remediate attacks before they are even noticed by our customers. And in the event of a severe attack, we support secondary DNS services to keep your online business up and running.

Continuous Assessment and Improvement

We rigorously analyze every DDoS attack to improve our security posture going forward. Using data gathered from Dyn Internet Intelligence, we regularly update our routing and transit policies to bolster our defenses.

Want to Learn More?

Latest

blog: Tech

Jul 21, 2016 // Mikel Steadman

DDoS Mitigation: Inside Dyn’s Internet Performance Management Approach

Read More

blog: Tech

Aug 3, 2016 // Gary Sloper

DDoS is No Game: Mitigate Risk with Internet ...

Read More

blog: Stories

Feb 13, 2017 // Tom Snow

Security Researchers See Record-High Software Vulnerabilities In 2016

Read More

blog: Tech

Aug 26, 2016 // Brendan Mangus

Black Market DDoS Attacks Up Triple Digits – ...

Read More

blog: Stories

Dec 16, 2016 // Andrew Sullivan

How We Got Our Tattered IoT Insecurity Blanket

Read More

Want to learn more about Managed DNS?


Use our Managed DNS with traffic steering capabilities to help build your DDoS strategy. To learn more, check out our products section.

Learn More