/ Daily News/July 26, 2022 Guangzhou - In recent years, DDoS attacks show an increasingly fierce trend. The continuously rising attack magnitude and intensity, as well as the constantly evolving new attack methods, greatly threaten the online business security of enterprises. DDoS defense schemes have also become an important security deployment for enterprises in digital upgrade.
Omdia, a well-known international market research agency, recently released a research report, focusing on the differentiated DDoS protection services provided by Tencent security, from the core capabilities and advantages of Tencent security DDoS protection solutions, as well as many security practices around the world, in-depth analysis. In order to provide experience and reference for enterprises to establish DDoS protection system.
According to the report, Tencent Security launched a new product called DDoS Edge Defender (now Tencent Cloud EdgeOne product), which combines cleaning and protection services for three main types of DDoS attacks, with protection functions of L3, L4 and L7. It provides efficient DDoS security protection for enterprises around the world.
The Omdia report notes that DDoS attacks are becoming more sophisticated and more diverse, so static policy protection is facing an increasing challenge in responding to these attacks.
According to Tencent security monitoring data, in the past year, both the magnitude and intensity of DDoS attacks increased, and the largest DDoS attack traffic in the industry was pushed up to 2.4Tb. Among them, a considerable proportion of DDoS attacks with over 100 gigabytes of traffic are launched by means other than SYN packets or UDP reflection. This means that TB-level attacks have become a real threat to enterprises.
In addition, sweep attacks, botnet using time difference attacks, pulse attacks, high-frequency instantaneous attacks and other attacks are becoming the usual means of attackers. DDoS attackers are no longer limited to a single flood attack. They also use analog services, protocol vulnerabilities, and HTTPS CC to carry out TCP Layer 4 CC attacks, and TCP reflection attacks to further threaten enterprise security.
Therefore, it is urgent for enterprises to break through the technological barrier on the defense side and build a new generation of defense system by using AI, algorithm, watermark, device fingerprint and other ways.
The Omdia report argues that DDoS is a growing market because the attacks themselves are growing in size, number, frequency, and variety. At present, technology manufacturers such as AWS, Microsoft, Akamai and Cloudflare have launched relatively mature and efficient DDoS protection services, but there is still a large space to be filled for differentiated services in the market.
As a leading technology company in China, Tencent owns a wide range of product lines. Based on more than 20 years' experience in mass business security practice and Anti-DDoS production, Tencent has created T-Sec anti-ddos solution to help more enterprises establish online business security lines.
The Omdia report points out that Tencent's security DDoS defense solution adopts the dual-cleaning principle. First, common attacks are cleared using common policies, and then custom policies are used for secondary cleaning. During the cleaning process, mirrored traffic is detected in bypass mode to avoid affecting normal service traffic.
In terms of accuracy, Tencent has 11 cleaning centers worldwide, which can supply thousands of PoPs at home and abroad respectively, and can improve the cleaning accuracy to 99.995% without affecting the business. In terms of stability, Tencent DDoS protection service can reach 20Tbps, which translates into a single point of up to 900Gbps. In addition, it uses 30-channel BGP routes to provide the best access experience for services.
At the same time, combined with Tencent's rich experience in the game field, Tencent's independent research and development of device fingerprint algorithm can also realize intelligent identification, so as to raise the threshold and cost of hackers to forge traffic fingerprint. In the future, intelligent purification algorithm based on artificial intelligence will play an increasingly important role in DDoS protection, which is also the core competitiveness of Tencent security DDoS protection.
In addition, for Tencent Cloud and non-cloud customers, Tencent Security DDoS protection solution provides different targeted sub-products such as professional edition and Advanced edition. For non-Tencent Cloud customers, Anti-DDoS Advanced specifically supports forwarding clean traffic to non-Tencent data centers for one-to-many protection. Enterprises can deploy and access the service based on their actual conditions, and obtain efficient cleaning and business-friendly experience of the entire process.
Relying on T-level protection capability all over the world, Tencent Security has expanded its DDoS protection capability to overseas key countries to ensure the safe, efficient and smooth operation of enterprises' business at home and abroad. Up to now, this scheme has successfully provided security services to more than 7,000 customers at home and abroad, including large game companies, financial industry, Internet industry and local governments.
Innovation and integration, edge security protection products can be expected in the future.
DDoS attacks continue to be severe, which also puts forward higher requirements for the flexibility and stability of cloud platforms in dealing with complex attacks. In this context, The Omdia report focuses specifically on Tencent's new security product, DDoS Edge Defender(now known as Tencent Cloud EdgeOne). It innovatively combines classic DDoS defense with basic defense against CC attacks and application-layer attacks. When detecting attack types such as zombie stream attacks, HTTP/HTTPS packets can be separated and checked again for payload.
This means that Tencent is targeting companies that are not currently Tencent Cloud customers. The DDoS Edge security product service, which brings together the protection functions of L3, L4 and L7 in the OSI network model, will help these enterprises import traffic to the Tencent Cloud in real-time scenarios for mitigation using the L4 network port or L7 domain name.
< /p>While Tencent is already the dominant provider of wide area networks and Internet connectivity in China, it remains a challenger to other incumbents in other parts of the world, the report argues. It will be interesting to see if Tencent, which has innovatively added CC attack protection to all its DDoS protection services, can challenge some of the already powerful vendors in this market and win more market share by providing differentiated services.
