DDoS Test Methodologies, Validating Critical Financial Infrastructure DDoS Mitigation

White Papers

Distributed denial-of-service (DDoS) attacks have become one of the most destructive tools used by cybercriminals and rogue states. Like other cyberattack vectors, DDoS has evolved over the years, creating numerous variants intended to disrupt or damage financial market infrastructure. The New Zealand Stock Exchange (NZX) had to cease trading for several days in September 2020 because of a sophisticated DDoS attack, demonstrating the severity of the potential market disruption.

Increased CPU and memory in devices, the popularity of the Internet of Things (IoT), newer apps introducing newer vulnerabilities, and sophisticated command and control (C&C) systems have all contributed to the meteoric rise of DDoS attacks. Their scale breaks records every year, with recorded attacks of over 1 terabit per second and throughput of more than 500 million packets per second.

Financial infrastructure is critical, and it relies on public internet access. (Some capital markets do not use the internet for trading but for dissemination of status or listings status.) To address that issue, a whole family of products and services based on DDoS mitigation has evolved.