In August, Microsoft reported that the Azure
Platform mitigated a record of 2.4 Tbps Distributed Denial of Service (DDoS)
attack targeting Azure customers. They crossed the record of a 2.3 Tbps attack
by Amazon Web Services in 2020. Microsoft has come across three prominent peaks
on the same day, 2.4 Tbps, 0.55 Tbps, and 1.7 Tbps, respectively, in 10
minutes.
The attack developed from multiple countries such
as Vietnam, Japan, Taiwan, Malaysia, and the United States over 70,000 sources.
Using short-lived bursts, the vector was UDP reflection crossing more than 10
minutes, each boosting up to terabit volumes in seconds.
Though the attack disrupted the company’s data
center, Microsoft mitigated it by implementing Azure’s DDoS protection service
that can absorb terabits of DDoS attacks. This mitigation capacity can absorb
the maximum volume of DDoS threats by offering required protection to the
systems.
The Azure mitigation lifecycle is arranged by the
control panel logic that assigns resources to the attack region. But in this
situation, the attack from the United States and the Asia-Pacific region did
not reach the customer region, but rather it mitigated at the source country.
Microsoft's Azure offers protection using
sufficient mitigation capacity. DDoS mitigation uses quick detection and
attacks by monitoring the infrastructure over the network. The control panel
logic aims to cut by the detection steps required to minimize the volume of
floods when deviations from the baseline are high. This helps to reduce the
damage by taking quick action to mitigate attacks.
Every organization with an online-exposed
workload is vulnerable to DDoS attacks, whether on-premises or in the cloud.
Due to the advanced mitigation logic and global absorption scale of Azure,
there is no record of any impact happening for the customers of Azure. The customers
who have their own data center might face extensive damage and cost.
As per the cyber news, in August and September,
the Russian internet company Yandex and
Cloudflare encountered two powerful DDoS attacks. But it was caused by two
separate attack vectors that damaged the HTTP requests.
InfosecTrain is the leading provider of consultancy
services, certifications, and training in cybersecurity. Our trainers will help
you understand cybersecurity and information security and improve the skills
required. Join InfosecTrain to get the best Cyber Security training to enhance
your career in the cyber world.
