An efficacious cyber threat consisting of a DDoS attack on the application-layer (L7) remains difficult to detect. A DDoS attack on the application layer focuses on targeting an edge server that runs the web application with low-level requests. As opposed, to overwhelming a service with high volume of requests.
The efficiency of the attack begins with disrupting network resources and targeting the server with a low bandwidth. Given the low frequency of requests, detecting the attack remains difficult, hence requests masquerade as genuine.
Increased attacks on application-layer have spurred cloud vendors to invest in developing protection measures against such attacks. Thereby, handling uncomplicated cases involves measures such as automation to recognise and bypass application-layer attacks. For example, the GET/POST requests blocking pipelines with repeated HTTP requests. A secondary protection measure pertains to vendors developing bot protection, thus successfully restricting the use of botnets.
Growing number of cloud vendors continue to incorporate dashboards. Graphical interfaces aid IT teams with instantaneous data. Dashboards provide visibility of security operations for cyber security analysts and developers alike with insights on cyber threats. Moreover, using dashboards enables quick responses from security teams to thwart real-time intrusion.
Tips for mitigating application-layer attacks
In-house cyber security teams should grasp the threat landscape by evaluating what scope there is for outsider to conduct application-layer exploitation by assessing web applications. While, one of the easiest ways is to utilise red teams of experienced penetration testers to forge a realistic DDoS simulation test on the company web applications. The output from the DDoS simulation test results on the application-layer will draw attention to what vulnerabilities exist.
Often, security teams overlook the configuration settings of vendor based tools. A matter of urgent priority and paramount importance for web application security fixates on tweaking security configuration to ensure settings meet the enterprise requirement.
10
