Name: DDoS Attack: How Attackers Circumvent CDNs to Attack Origin Systems
Start: 2018-01-18T21:00:00Z
End: 2018-01-18T21:00:46.000Z
Location: BrightTALK
Rating: 4.73

Incapsula is a cloud-based application delivery platform. It uses a global content delivery network to provide website security, DDoS protection, load balancing and failover services to clients.

Securing the Cryptocurrency Exchange: Ensuring Protection, Availability, and Performance 

Now, more than ever, cryptocurrency exchanges are facing security threats in the form of volumetric, application layer, DDoS, and account takeover (ATO) attacks. Although the success of cryptocurrency exchanges makes them especially attractive to cybercriminals, attacks of late are taking exchanges by surprise, and they are often not scaled or have not built a secure environment. In this webinar, join Security Engineer Jonathan Gruber and Enterprise Security Expert Tal Stern from Imperva as they explore the latest cryptocurrency exchange vulnerabilities and attacks and explain the best strategies for mitigation.

Securing the Cryptocurrency Exchange

With more companies moving their data and apps to the cloud, do you know what security approaches your peers are taking? You know the threat landscape is constantly evolving, but do you know how your current cyber security defensive posture stacks up against those of your peers? In this live webinar, CyberEdge and Imperva will discuss the extent cybersecurity solutions are deployed in the cloud, on-premises or hybrid and other key insights from the 2018 Cyberthreat Defense Report. 
 
Attend this webinar and learn answers to your most pressing questions: 
•Do we have gaps in our cyberthreat defenses? 
•How are my peers thinking differently about cyberthreats and the options for defending against them?
•How does our security spend compare to other organizations? 
•Which security technologies should we be investing in next?

Hybrid Security is on the Rise: Insights from 2018 Cyberthreat Defense Report

Protect Your Web Applications from Cryptomining: The New Force Behind Remote Code Execution Attacks

Remote code execution (RCE) attacks involving cryptomining malware are gaining momentum. They've become attackers' new favorite way to exploit vulnerabilities in web application source code and are prevalent in over 88% of all RCE attacks. In this webinar, join Security Researcher Gilad Yehudai and Threat Research Team Leader Nadav Avital as they analyze malicious cryptomining script, investigate methods these attackers use to make money, and explain how Imperva WAF solutions are equipped to mitigate the threat.

Protect Your Web Applications from Cryptomining

DDoS attacks can be damaging; especially for an online business that depends on valuable client relationships and reliable user experiences. But business organizations aren’t the only targets of malicious web bots. Banking institutions, governments, hospitals and schools have all suffered from debilitating attacks in the past few years.

There are still a lot of misconceptions when it comes to DDoS attacks. We take some of the most common ones and address misleading information. One thing is certain: Knowing the facts will help you keep your website safe.

Fighting Cybercrime: Seven Popular DDoS Myths Debunked

Bots. They generate over half of the internet traffic and over half of the bots are malicious (or of questionable value). Bots can make your systems vulnerable to scraping bots, account takeover bots, impersonators, spammers and hackers. 

Impreva will share data gathered from their security research team about the most recent bot trends, how bot traffic is changing, where it’s coming from, and the top actions you should be taking to mitigate the effects of bad bots on your websites. Join us for Part 1 of a 3 Part Security Briefings series and understand how commercial services take a multi-layer approach to bot mitigation and management and whether one of these services may be appropriate for you.

Part 1: March of the Bots: How to Deal with the Onslaught

Do you believe your APIs are adequately protected? Many modern applications (including mobile) leverage public APIs for communication, but these public APIs are often poorly protected against DDoS attacks because of adverse interactions with the communication stream. Join DDoS testing expert and NimbusDDOS founder Andy Shoemaker as he delves into the challenges of protecting API endpoints and what you can do to make sure your APIs are truly secure.

In this webinar you will:
     1.Hear why attacks on API endpoints can be so devastating
     2. Learn why common mitigation approaches fail (CAPTCHAs, other challenge-response tests)
     3. Discover ways to protect apps by securing APIs
     4. See a live demo of a Layer 7 attack against an API

API Endpoints: The New DDoS Attack Vector for Cybercriminals

Are you relying on identification methods like CAPTCHAs to protect your critical assets from price scraping and content theft? Join Imperva Security Engineers Jonathan Gruber and Danny Milshtein to uncover the limitations of common security measures. In this webinar, they’ll demo how Incapsula goes beyond standard threat intelligence to protect your site from malicious site scrapers.

In this webinar you will:
- Understand the bot population and how to identify “good” and “bad” bots
- Learn how to block or redirect site scrapers
- See a live demo of the Incapsula bot mitigation security solution

Live Attack: Winning the Battle Against E-Commerce Site Scrapers with Incapsula

If you're using the Akamai platform and it is no longer meeting your company’s need for security and application delivery, try Imperva Incapsula.
The Incapsula cloud service gives you a single interface that integrates content delivery, website security, DDoS protection, and load balancing. Incapsula is PCI compliant, has customizable security rules and offers 24/7 support. With Incapsula you can deliver applications securely and efficiently. 

Here's what the webinar will demonstrate:
• Operational advantages and cost savings from a switch to Incapsula
• How to plan and execute a successful migration from Akamai to Incapsula
• The differences in functionality between the two platforms

Make the Switch to Incapsula: Improve Web Performance and Site Protection

Over the last few months, dedicated security researchers at Imperva Incapsula have witnessed the emergence of a new DDoS assault pattern, which we have come to call a “pulse wave” attack. Join Avishay Zawoznik, Lead Threat Researcher, and Kim Lambert, Incapsula Product and Security Evangelist, as they explore the rationale behind this type of attack, the consequences it can have for your network, and what you should do to make sure your organization is adequately protected.

Pulse Wave Attacks: The New DDoS Threat to Your Network

IncapRules are an integral method to customize Incapsula for your specific applications and environment. However, we find that our enterprise clients may have questions on building advanced rules or need help understanding how to write them for complex scenarios. In this session, Peter Klimek, Principal Security Engineer, discusses the interface, some of the most common filters and actions, and how a large client collaborated with our security team to thwart credential stuffing on their client self-service portal.

Using IncapRules to Customize Your Security and Access Control

Moving your critical applications from on-premises servers to the cloud can be a daunting prospect — but it doesn't need to be. Drawing on over 5 years of experience bringing some of the largest CMS sites on the Web into the cloud, Vasken Hauri, VP of Engineering at 10up, covers the key aspects you'll need to consider to ensure a smooth and successful migration. He also touches on some best practices you can apply post-migration to keep your sites secure, performant, and worry-free in an era where our toasters can launch DDoS attacks.

Migrating to the Cloud? Five Years’ Worth of Lessons Learned

Incapsula introduced Application Delivery Rules (ADR) in October of 2016, but many clients have not tapped into their powerful abilities. In this session, Jeff Serota, Technical Account manager, provides an overview of ADR, discusses how they differ from IncapRules, and teaches you how to leverage them in your own Incapsula deployment.

Boost Your Website Performance with Advanced Application Delivery Rules

If your Akamai cloud-based platform is no longer meeting your company’s need for security and application delivery, consider a switch to Imperva Incapsula.

The Incapsula cloud service helps you deliver applications securely and efficiently. With a single interface that integrates content delivery, website security, DDoS protection, and load balancing, you can accelerate the delivery of your web content and protect your site from external threats.

Here's just some of what you'll learn during this webinar:

•The differences in functionality between the two platforms
•Operational advantages and cost savings from a switch to Incapsula
•How to plan and execute a successful migration from Akamai to Incapsula

And just for attending this live webinar, you’ll get a free migration guide to help you transition easily from Akamai to Incapsula.

With PCI compliance, a robust engine with customizable security rule setting, 24/7 support, and significant cost savings, why wouldn’t you consider a switch to Incapsula? Find out if the Incapsula cloud security platform is right for you.

Upgrade Your Website Performance and Security: Migrate from Akamai to Incapsula

Organizations often do not know if their websites can withstand DDoS attacks. The reasons for this include:

•There’s a lack of expertise among customers and consultants.
•It’s hard to test as DDoS pentesting is likely the most difficult project to approve and perform on a regular basis.
•It’s difficult to measure and standardize.

The DDoS Calculator can help solve all these problems by giving an objective, quantifiable analysis of your organization’s ability to withstand DDoS attacks. 

In this webinar Ziv Gadot, Red Button CEO, will demo the DDoS Calculator. He will also explain the technologies (expert system) and standards (DRS) behind the DDoS calculator and what they mean for you.

Assess DDoS Readiness Without Pentesting

More than 90 percent of companies use cloud services. As more companies move their apps and data to the public cloud, the risk of web threats increases. 
 
Adding security to your cloud services such as AWS, Azure and Google Cloud Platform can help reduce exposing your enterprise to DDoS attacks and other threats. Find out how Incapsula WAF and DDoS mitigation can help to:
 
- Mitigate risks to your network
- Increase visibility to security events
- Save cost and brand reputation

How to Protect Your Cloud Instance with Incapsula

The focus of the news media has been on massive DDoS attacks, with recent headlines proclaiming attacks in excess of 500Gbps.  In this webinar, DDoS testing expert and NimbusDDOS founder Andy Shoemaker will demonstrate in a live DDoS attack how even a tiny attack can cause significant outage, including:
 
1. How a small gap can be responsible for a big outage
2. A demo of a live attack on a site
3. Methods you can use to identify and fix these risk areas
4. How to detect all layer 7 attacks automatically

Small DDoS Attacks Can Lead to Large Outages

Denial of service attacks are in the news every week, and sometimes even daily. When they are successful, they cut off access for businesses and disrupt their operations if not cripple them. Take a tour to see what these crippling attacks are, who’s behind them and why they happen.

The Denial of Service Underground DDoS Perpetrators and Attacks Exposed

Key Insights from NTT Security's Threat Intelligence Report

Supercharge Your SIEM with Big Data and Machine Learning

Key Considerations for Building Stronger Security

Security and the Changing Value of our Data

2018 SOC Market Predictions: How Threat Intelligence Is Changing Security Ops

Get Lean, Get Mean – Thwarting Hackers with Single Agent Endpoint Security

Data Driven Security: Improve Your Security Posture To Defeat Your Adversary

Crafting An Analytics-Based InfoSec Strategy

The Goldilocks Problem of AI in Security: How to Find the “Just Right” Use Cases

Fusion of Deception and AI for Active Defense

Hybrid-AI: Boost Cybersecurity with Human Augmented Machine Learning

API Security: The Past, Present, and Future

War of the Machines

Top Cybersecurity Priorities for CISOs

Mapping and Securing Data Flows Across Your Ecosystem

Are You Too Negative When It Comes to Your Endpoint Security Strategy?

5 Ways to Strengthen Your Phishing Defense Program for 2018

Advanced Cyber Security: Data-driven Defense - The CISO's Dilemma

Securing Your Digital Way of Life

Data-Driven Prioritization:The Role of AI in Vulnerability and Threat Management

Are You Ready for PCI D-Day? January 31, 2018 Is But 2 Weeks Away

Crafting Smarter Security Strategy in 2018

Smarter Security: Cyber Resilience, TARA and Red Teaming

Making Security Strategy Reality: Winning Strategy through Tactics

Advanced Cyber Security: Data-driven Defense

Do you feel safe from DDoS attacks because you use a content delivery network (CDN)? Join Andy Shoemaker, founder of DDoS testing company NimbusDDOS, to uncover the limitations of this strategy. In this webinar he’ll perform a live DDoS attack to show how attackers bypass CDN defenses to directly target an organization’s critical resources.

In this webinar you will:
· Learn about the benefits and pitfalls of using CDNs as a DDoS protection strategy
· Watch a live DDoS attack from the attacker's perspective
· Participate in a live Q&A with DDoS experts

DDoS Attack: How Attackers Circumvent CDNs to Attack Origin Systems

DDoS

Cyber Security

Cyber Attacks

Information Security

Network Security

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

DDoS Attack: How Attackers Circumvent CDNs to Attack Origin Systems

Presented by

About this talk

More from this channel