DDoS traffic view - Real-time via the ATLAS portal
Arbor Networks announced today on their “Security to the Core” blog their (Active Threat Level Analysis System) portal. Over the last 18 months, Arbor has been working with their customers who have deployed the Arbor Peakflow SP platform to gather global statistics around DDoS traffic and other security threads.
So far 68 providers are participating in the program, and according to Arbor, more then 70% of the Internet is protected by the Peakflow platform. The data is collected on nearly 1300 routers and the peak traffic levels are up to 1.5 Tbps.
Some trends have become visible over the past 18 months:
- IRC servers are still the most comment target
- the most common attacks are TCP SYN flood based, with ICMP floods at a close second
According to Arbor, DDoS traffic has accounted for an average of 1.3% of all traffic, with peaks up to 5%!
Teh Atlas portal includes the following items at the moment:
- Global Threat Map: Real-time visibility into globally propagating threats
- Threat Briefs: Summarizing the most significant security events that have taken place over the past 24 hours
- Top Threat Sources: Multi-dimensional visualization of originating attack activity
- Threat Index: Summarizing Internet malicious activity by offering detailed threat ratings
- Top Internet Attacks: 24-hour snapshot of the most prevalent exploits being used to launch attacks globally
- Vulnerability Risk Index: Determines the most dangerous vulnerabilities being exploited on the Internet today