In October 2016 DNS provider Dyn was hit by a major DDoS (Distributed Denial of Service) attack by an army of IoT devices which had been hacked specially for the purpose. Over 14,000 domains using Dyn’s services were overwhlemed and became unreachable including big names like Amazon, HBO, and PayPal. <\/p>\n
According to research by Cloudflare the average cost of infrastructure failure to businesses is $100,000 (£75,000) per hour. How then can you make sure that your organization doesn’t fall victim to this kind of attack. In this guide you’ll discover major infrastructure providers who have the necessary digital muscle to protect against attacks designed to flood your network capacity. <\/p>\n
You’ll also discover which providers can offer protection against more sophisticated application (layer 7) attacks, which can be carried out without a huge number of hacked computers (sometimes known as a botnet). <\/p>\n
Project Shield<\/a> is the creation of Jigsaw, an offshoot Google’s parent company Alphabet. Development began several years ago under George Conard in the wake of attacks on election monitoring and human rights related websites in the Ukraine.<\/p>\n Project Shield is able to filter potential malicious traffic by acting as a reverse proxy which sits between a website and the internet at large, filtering connection requests. If a connection seems to be from a legitimate visitor Project Shield permits the connection request. If a connection request is determined to be bad e.g. multiple connection attempts from the same IP address, then it is blocked. This system makes Project Shield extremely easy to implement simply by changing your servers DNS settings. <\/p>\n Any power users reading may wonder how filtering traffic via a proxy will work with SSL. Fortunately, Jigsaw has thought of this and has put together a comprehensive tutorial<\/a> to make sure secure connections to your site work seamlessly. Several other tutorials are also available in the support section.<\/p>\n Currently Project Shield is only available for media, election monitoring and human rights related websites. The primary focus is also on small under resourced websites which cannot afford expensive hosting solutions to protect themselves for DDoS. If your organization doesn’t match these requirements you may have to consider an alternative solution such as Cloudflare. <\/p>\n