Name: Too Much Time on My Hands: Network-Scale Mitigation of NTP DDoS Attacks
Start: 2014-03-14T15:00:00Z
End: 2014-03-14T16:27:08.000Z
Location: BrightTALK
Rating: 4.62

Current DDoS and Cyber Threat strategies, best practices and latest trends.

This webinar will be presented in Italian.

Questo webinar è incentrato sull'evoluzione degli attacchi informatici nel 2023, secondo il NETSCOUT Threat Intelligence Report, e su come fermarli con una mitigazione intelligente e multilivello. Scopri la mitigazione "intelligente multilivello" che combina ISP/Cloud DDoS, BGP-Flowspec e difese edge aziendali e perché ora è più importante che mai!

Gli attacchi odierni, provenienti dall'esterno e dall'interno dell'azienda, devono essere rilevati e mitigati rapidamente per limitarne l'impatto. Spiegheremo il concetto di mitigazione "multistrato intelligente" e come funziona. Scopri come questa mitigazione viene utilizzata per bloccare attacchi esterni e interni, attacchi a dispositivi "stateful" come FW, VPN e IDS e vari attacchi a livello di applicazione, incluso il traffico crittografato.

Attacchi informatici del 2023 e la mitigazione intelligente multilivello

Webinar Focus: Education Sector

During this Webinar, several key players in the Education sector – JISC, City University, and South Staffs College – will explain why they have chosen to complement their DDoS Cloud protection with NETSCOUT Arbor Edge Defence, an on-premise DDoS solution.

Our panel will discuss the need for uninterrupted online lectures and seminars and how NETSCOUT Arbor Edge Defense (AED) has:

• Ensured uninterrupted online lectures and seminars

• Provided protection from ransomware and cyber-theft

• Detected and blocked low level application attacks

• Improved IT performance for a range of internet reliant services

• Provided a Return on Investment in the order of 200%

The Panel includes independent experts and users from:

• JISC - Ben Crowther, Security Analyst

• South Staffs College - Jason Whitaker, Director of IT and Project Performance

• City University - Paulo Leal, Network Team Leader

• Academia - James Ferguson, Cyber Security Practise

• NETSCOUT - Brian Gregory, Security Overlay

Why Complement Your Cloud DDoS Products With NETSCOUT’s On-Prem DDoS Solutions

Join this discussion and gain insight on:
• Understanding the right questions to ask to ensure you are choosing, building and implementing the right type of DDoS protection that meets the needs of your organization and aligns to your unique circumstances.
• The critical differences between the types of DDoS attack protection solutions including CDN, ISP, ISP agnostic, on-premises, hybrid, and the risks they mitigate and the risks they do not mitigate.
• NETSCOUT Arbor DDoS solutions that provide best-in-class solutions for identifying and managing the mitigation and detection of DDoS and other threats to the network, surgically removing DDoS attack traffic from your network without disrupting key network services, inline security appliances deployed at the network perimeter, on-demand cloud-based solutions, and managing the systems, tuning them to industry best practices, and managing DDoS incident response.
• Best Practices in DDoS Defense including strategy, tactics, keep components, automation and proper coverage to detect, thwart and stop DDoS attacks from doing damage.

One Size Does NOT Fit All When it Comes to DDoS Protection

This webinar will be presented in Italian.

Quasi tutti i CISO aziendali hanno in corso progetti di impiego delle tecnologie SIEM ed XDR considerati strumenti necessari per riprendere il controllo di un’infrastruttura IT il cui perimetro risulta essere sempre meno chiaro e definito.
Questo webinar spiega perché i suddetti strumenti, pur necessari, non siano più sufficienti e come, con l’uso appropriato della tecnologia NDR, si possano combattere efficacemente le minacce informatiche.

Scopri il concetto di "DPI-based NDR" e come questo fornisce dati “intelligenti” e cronologia per integrare XDR, SIEM e Security Data Lake.
NETSCOUT spiegherà come utilizzare i metadati della tua rete per il monitoraggio delle minacce, il rilevamento e le analisi forensi Back-In-Time degli attacchi Zero Day.

XDR e SIEM: possono esistere senza NDR?

Join this discussion and gain insight on:
• Making sense of DDoS attack trends, the latest network and security research and analysis, and recommended best practices from industry experts that can be deployed in your environments.
• Utilizing best-in-class on premises stateless solution that automatically detects and intelligently mitigates DDoS attacks and other cyber threats.
• Leveraging cloud-based, fully managed DDoS protection services consisting of fifteen global scrubbing centers and more than fifteen Tbps of attack mitigation capacity.
• Deploying intelligently automated hybrid DDoS protection that combines on-premise and cloud working in concert to provide the best protection, reduced OpEX, and lowest Total Cost of Ownership.

Defeating Adaptive DDoS Attacks in Superhero Fashion

This webinar will be presented in Spanish.

Actualmente la mayoría de CISO están gestionando proyectos SIEM y EDR.  ¡Aparentemente la única forma de recuperar el control de la infraestructura de TI empresarial en evolución actual !

Este seminario web explica las nuevas tendencias de ciberseguridad como XDR, Data Lake y NDR y porqué están creciendo. Conozca el concepto de "NDR basado en DPI" y cómo proporciona "datos inteligentes" e históricos para complementar  las soluciones de XDR y Data Lakes. Consulte los ejemplos de casos de uso de "NDR avanzado" para XDR, SIEM y Data Lake.

El stack tecnologico empresarial de hoy en día es heterogéneo y está fuera de control.  NETSCOUT compartirá ‘best practices’ sobre cómo usar los metadatos de su red para la monitorización y detección de amenazas, así como la capacidad de análisis forense retrospectivo ante ataques de día cero.

XDR, SIEM y Data Lake: ¿Pueden existir sin NDR?

The DDoS threat landscape continues to change at a rapid pace. Because Internet Service Providers play a vital role in protecting your customers and the Internet at large from DDoS attacks, it’s imperative that you stay abreast of the latest DDoS attack trends.

Join us in this webinar as Patrick Donegan, industry analyst and founder of HardenStance and Roland Dobbins, Principal Engineer from NETSCOUT, explore key findings from NETSCOUT’s latest DDoS Threat Intelligence Report.

Get up-to-speed on the latest:

• Global and country DDoS attacks statistics

• Most common DDoS attacks vectors, tactics and techniques

• How DDoS attacks are linked to Ukraine-Russia kinetic warfare

And most importantly, learn the best practices in Adaptive DDoS defense

Need to Know: Findings from NETSCOUT’s DDoS Threat Intelligence Report

Join this discussion and gain insight on:
• The different types of Cyber Threat Intelligence (CTI) and the value they provide to supporting and enhancing your Cyber Defense strategy, development and execution.
• Active Threat Level Analysis System (ATLAS) that delivers unique visibility into one-third or all internet traffic correlated into meaningful, understandable and usable intelligence to enable organizations to better understand, defend and react to threats.
• Context and actionable DDoS threat intelligence via ATLAS, Internet-wide security trends, mitigation guidance for new DDoS attack vectors and attack campaigns, designing new DDoS detection / classification / traceback / mitigation mechanisms, and leveraging NETSCOUT expertise for complex, high-impact DDoS attacks.
• ATLAS Intelligence Feed (AIF) which provides unique information to automatically arm NETSCOUT Arbor DDoS attack protection solutions with the latest DDoS attack tactics, known sources of DDoS attacks and Indicators of Compromise to automatically protect organizations from DDoS attacks and other cyber threats.

Smartly Using Global Threat Intelligence in the Fight Against DDoS Attacks

Join this discussion and gain insight on:
• Exposing myths, common misunderstandings and flat-out un-truths regarding state exhaustion DDoS attacks, application layer DDoS attacks, capabilities of firewalls, CDN based DDoS protection, cloud only protection and other common cybersecurity sentiments.
• Evolving defensive strategies to keep pace with rapidly changing attack tactics and strategies of criminal actors and nation states.
• Industry best practices you may not know about that will improve your preparedness, refine your cyber defense strategies, help you defend more effectively and efficiently and reduce your risk.
• Relationship of DDoS attacks to other cyber security threats like Ransomware, infiltration, exfiltration, and reconnaissance and how to strengthen your cyber defenses with achievable mitigation strategies.

You Think You Know DDoS?  Think Again

This webinar will be presented in German.

NETSCOUT schützt die kritische Unternehmens-Infrastruktur der „Connected world“ vor Ausfällen und unterschiedlichsten Faktoren der Cyber-Kriminalität.

Erfahren Sie anhand zweier praxisnaher Beispiele, was Sie Zero-Day Exploits oder Angriffe auf die State-Table Ihrer Infrastruktur entgegensetzen können.

Haben Sie das Risiko minimiert, dass Angreifer eines Tages DOCH Ihren Perimeter überwinden? Sehen Sie in einer Live-Demo, wie Sie solche Szenarien erkennen und adressieren können.

Nach mir die SYN-Flood !?? – Netzwerkvisibilität ist wichtiger denn je!

The key to solving complex IT ops problems collaboratively is to build a common engineering approach to managing risk across the concerns of the security and network ops teams – in other words, a holistic approach to managing risk known as Risk Engineering.

Join Intellyx analyst Jason Bloomberg and NETSCOUT in this webinar when we discuss:

• How the NetOps concept of Site Reliability Engineering (SRE) can be applied to Cybersecurity

• Why network packet data is the ultimate source for comprehensive Observability and the foundation of Risk Engineering

• How NetSecOps teams can utilize NETSCOUT’s Deep Packet Inspection and Adaptive Service Intelligence technologies to create a common source of packet-derived data for collaboration and reduction of IT risk

Packet-Based Risk Engineering – A Novel Approach for NetSecOps Teams

RÉSUMÉ : 
Cyberattaques de 2023 en pleine évolution Vs. Atténuation « multicouche-intelligente » 

Comme expliqué dans le webinaire 1 de cette série, « Advanced NDR » est un catalyseur clé pour les tendances XDR et Data Lake Sécurité.   Et dans le webinaire 2 nous avons présenté comment « Advanced (DPI-Based) NDR » les complète - notamment avec les quatre cas d'utilisation : (1) Early Warning, (2) Attack Surface, (3) Contact Tracing, (4) Back-in-Time.   

Ce webinaire 3, qui s’adresse aux RSSI et aux gens de profils techniques cybersécurité, se concentre sur l'atténuation intelligente-multicouches des attaques en plein d’évolution, pour compléter les initiatives XDR et Data Lake Sécurité.    
La plupart des fournisseurs d’Internet et de Cloud offrent une cyber-protection, et que plusieurs « éléments » de réseau/sécurité opérés par l’entreprise peuvent être utilisés pour bloquer les mauvais flux basés sur l’intelligence IoC, pourquoi le concept d'atténuation « multicouche intelligente » ?
Ce webinaire couvrira les raisons pour lesquelles les nouvelles cyberattaques en évolution nécessitent de nouvelles mesures d'atténuation. Comment les attaques d'aujourd'hui, venant de l'extérieur et de l'intérieur de l'entreprise doivent être détectées et mitigées rapidement pour limiter leur impact. Et comment, même les « éléments » de sécurité tels que le FW et l'IDS « statefull » peuvent faire l'objet d'attaques (et doivent être protégés).  Ceci, ensemble, constitue l’atténuation intelligent-multicouche).

Cyberattaques 2023 en évolution ! vs. Atténuation « multicouche-intelligente »

Cyber attackers can level organizations with a distributed denial-of-service (DDoS) attack. How do security teams keep stakeholders informed when services are down? Who do they call to remediate the incident and ensure the attackers don’t knock everything down again? Will the right people have the right access to the right resources if the worst happens? In this webinar, learn what processes and procedures should go into the DDoS response playbook, and learn about the tools and techniques that can be used to detect, classify, traceback, and mitigation DDoS attacks before they impact services.

When you attend this webinar, you'll learn:

- The latest tactics and techniques of Adaptive DDoS attacks

- The minimal requirements for building a DDoS response playbook

- How to determine and orchestrate the best method of mitigation per DDoS attack type

Every DDoS Resilience and Response Playbook Should Include These Things

RÉSUMÉ :  
 « NDR Avancé (basé sur DPI) » les cas d’utilisation  (NETSCOUT)

Comme expliqué dans le webinaire 1 de cette série, « Advanced NDR » est un catalyseur clé pour les tendances XDR et Data Lake Sécurité.   Ce webinaire explique quatre exemples de cas d'utilisation : (1) Early Warning , (2) Attack Surface, (3) Contact Tracing, (4) Back-in-Time, et s'adresse aux RSSI, aux responsables, et techniciens de la cybersécurité.     
  
Après 10 ans de croissance du BYOD, du télétravail, et des réunions virtuelles, les cybermenaces s'adaptent et se multiplient … la plupart des RSSI ont désormais déjà des projets « EDR » -- le monitoring à partir des terminaux « end-points » pour détecter et répondre aux cybermenaces et constitue une bonne approche pour adresser les attaques provenant des End-Points.    
  
Mais,  « on ne peut pas protéger ce que on ne voit pas » !    Les entreprises d’aujourd'hui recherchent une source de données pour la surveillance des menaces, dans un environnement hétérogène (Multi-Cloud + On-Prem + Hosting + SaaS + Endpoints).   Le NDR avancé, basé sur le DPI des paquets réseau, convertit les paquets bruts de vos réseaux privés en métadonnées "intelligentes" utilisables et stockables, pour permettre une visibilité, une surveillance, une détection et une réponse complètes aux menaces, ainsi qu'une enquête « Back-in-Time » sur les attaques Zero Day.

NDR Avancé (basé sur DPI): Démo d’utilisation pour XDR et Data Lake Sécurité

In today’s world of enterprise security, many technology options are available—perhaps too many. Despite all the options available, security teams still ask the same questions: What is the “right” telemetry? How do we best integrate, and where can we find the best return on our investment?

In response to these questions, and the need to disrupt adversary TTPs, eXtended Detection and Response (XDR) technologies have emerged. XDR looks to combine telemetry from multiple sources and integrate with “next-step” technologies that allow for automated data correlation, enrichment, and response. However, we cannot achieve a successful strategy without the inclusion of network telemetry.

In this webcast, SANS Instructor Matt Bromiley and NETSCOUT IT and Computer Specialist Erik Hjelmstad look at the necessity of including network detection and response (NDR) capabilities in your XDR strategy. The network is one of the most important areas of any enterprise, and an extremely important source to detect adversary activity. XDR cannot exist without NDR, so make sure you’re including it in your security stack too!

XDR Does Not Exist Without NDR

This webinar will be presented in French.

Pourquoi l'évolution de l'entreprise vers le cloud et télétravail entraînent l'adoption de EDR, XDR, et Data Lake?   Qu'est-ce que le NDR avancé ?  

Après 10 ans de croissance du BYOD, du télétravail, et des réunions virtuelles... les cybermenaces s'adaptent et se multiplient … C'est maintenant l'âge d'or de l'EDR et la tendance XDR et Data Lake.   

Ce webinaire pour les RSSI et Responsables Sécurité se concentre sur les principaux moteurs du marché sur les Tendances XDR et Data Lake Sécurité:

• Pourquoi l'évolution de l'entreprise vers le cloud et télétravail, et l'évolution des cybermenaces, entraînent l'adoption de l'EDR/XDR/Data Lake ?

• Qu'est-ce que le NDR avancé ?      Pourquoi DPI-based NDR ?

• L'évolution des cybermenaces selon le « NETSCOUT DDoS Threat Intelligence Report 2022».

Tendances Sécurité 2023 :  XDR et Data Lake ?  Oui, mais pas sans NDR !

DDoS attacks have been around a long while. So long, that established tactics may seldom be reviewed or updated. But without realizing it, some of your protection solutions may be built on myths such as:

-  DDoS attacks are just storms to be weathered or endured

-  Multipurpose security tools like next generation firewalls are up to the task

- A cloud-based solution is all that is needed for DDoS protection

Like all myths, each of these have a foundation in truth. Join this session to learn why these well-intentioned solutions are often flawed. Then explore ways to build a powerful DDoS protection solution for your organization based on proven best practices, not myths.

Don’t Fall for It - 3 Myths of DDoS Protection

Embedded in your network infrastructure are many technologies that you can leverage to gain comprehensive network observability. This visibility can be used for network design or planning, new business development and DDoS attack protection.

Join us on this webinar and see how NETSCOUT solutions give you the visibility and data you need to:

·       Analyze different flavors of Internet Protocol Flow Information Export (IPFIX), SNMP, and BGP, RPKI and 6PE to gain pervasive network observability

·       Conduct highly intelligent behavioral analysis to detect and visualize DDoS attacks

·       Provide unique visibility into Over the Top (OTT) traffic

Position Your Network for Comprehensive Observability and DDoS Protection

Although NTP reflection/amplification attacks have been observed in the wild for many years, recent high-profile attacks have drawn more attention to them.  In this webinar, a member of the Arbor Security Engineering and Response Team (ASERT) will conduct a deep dive into some recent NTP attacks.  Network-scalable best practices for detection, classification, trace-back and mitigation of high-impact attacks, ranging from the tens of Mbps up to more than 300 Gbps in size, will be addressed.

Too Much Time on My Hands:  Network-Scale Mitigation of NTP DDoS Attacks

DDoS

Gaming

Attacks

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Welcome to the mobile computing community on BrightTALK! With the consumerization of IT and the widespread adoption of mobile devices across the globe, mobile computing has become an important part of many people's lives in a culture of bring your own device (BYOD). With mobile devices doubling as work phones and more employees working from home, businesses need to provide secure access to data and work applications from anywhere at any time. Join this growing community and hear from industry thought leaders in webinars and videos as they share their insight on mobile computing research and trends.

Mobile Computing

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

The IT project management community on BrightTALK includes thousands of IT project and portfolio management professionals. Find relevant webinars and videos on agile methodologies, scrum strategy, project management processes and more. Attend live webinars or view on demand content presented by recognized thought leaders in the IT project management industry.

IT Project Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Too Much Time on My Hands: Network-Scale Mitigation of NTP DDoS Attacks

Presented by

About this talk

More from this channel