Is Your Online Security Intelligent? Internet Performance Management Corey Hamilton Product Marketing, Internet Performance Management

Everyone Talks About Internet Security

Cloud and Hosting Security Content Delivery Networks Data Centers & Firewalls

Nobody Talks About Internet Security

Where’s the Security on the Internet? Cloud and Hosting Providers Content Delivery Networks Customers Employees Partners The Internet: Fertile Grounds for an Attack Data Centers

OF INTERCONNECTED NETWORKS THE INTERNET: IT’S A SYSTEM OF INTERCONNECTED NETWORKS @dyn

Where Does Your Data Flow? ● Average Path Across the Internet: Crosses the networks of between 4 - 8 different NSPs and ISPs ● Each network typically includes 3 - 6 hops ● Requests for data cross anywhere from 12 - 48 hops across the Internet

Fertile Grounds for Security Threats ● You Don’t Own It ● You Can’t See Most of It ● Even non-malicious issues can affect your business These problems happen Thousands of times every day

So, Who’s Responsible for This? ● The Network Service Providers? ● The Internet Service Providers? ● Cloud Providers? ● Content Delivery Networks?

“My Hosting Provider/CDN Will Take Care of it” Service Dashboard is Green “We are currently monitoring an external Internet provider issue that is causing interrupted service connectivity to AWS services for some customers. AWS services are not affected and continue to operate normally.” Netflix, Pinterest, and Slack (all AWS Customers) are knocked offline for 40 minutes

X It Wasn’t AWS’ Fault Netflix Customers Netflix Couldn’t See It Pinterest Couldn’t See It Slack Couldn’t See It But...their customers were calling! Other Cloud Providers AWS Virginia Netflix Customers X The Internet Data Centers

Bad News: You Are Responsible for this ● You didn’t cause the problems ● You didn’t ask for it ● But, your customers will blame your company ● Who is/will be responsible for this at your company?

If You Can’t See It, You Can’t Defend It What Kind Of Threats Are Out There?

A Couple Examples Man-in-the-Middle attacks ● DDoS Attacks ● Route Hijacking Man-in-the-Middle attacks ● Safe Harbor Compliance

The First Step in Defense: Visibility Imagine somebody coming to rob your house. What if you could be alerted to this while they were still driving across town, rather than when they’re at your door??

Internet Visibility into DDoS Attacks ● Originate way outside your firewalls ● Detect the flood of traffic before it hits you ● Monitor for these 24x7 ● Global Networks ensure the bandwidth to withstand attacks

Early Mitigation of DDoS Attacks ● Be Alerted to DDoS Attacks occurring across the Internet ● Often seen as Enterprises shift traffic to scrubbing centers ● Redundancy provides options ● Two (or more) scrubbing centers ● Which is more available during an attack ● Shift traffic to scrubbing center that’s best able to keep up

Internet Visibility into Route Hijacking ● Identify Routing Anomalies ● Monitor changes to your prefixes and ASNs ● Visibility into Internet paths leading to your assets ● Identify and mitigate Man-in-the-Middle attacks

Example 1: Internet Initiative Japan (IIJ) ● Internal employee received fake letter to authorize an IP address block to another party ● Address space was transferred to malicious group ● IP address becomes associated with hacking efforts ● Occurred undetected for over a year ● Internet visibility eventually lead to its discovery

Example 2: Atomic Weapons Establishment ● Typically, data is passed from Houston to Great Britain ● Unintentional DNS update reroutes this traffic through Kiev, Ukraine ● Data ultimately arrives at destination in Great Britain ● Continues undetected for 5 days

How Do We Mitigate These Issues? ● Reactive Mitigation Begin monitoring your address space (ASNs, Prefixes) Ensure Redundant Paths (multiple providers or endpoints) Alerts when address space changes or performance to these assets is affected Update DNS to send traffic through desired paths

How Do We Mitigate These Issues? ● Planning Mitigation Leverage Internet Visibility to identify optimal locations for infrastructure Ensure ISP relationships send your data where you want it to go -- and not go Where you store your data dictates how end users will reach it. Internet paths flow through different networks depending on the destination

Current Trends

Safe Harbor Compliance Where does your data travel?

Safe Harbor Compliance A Friendlier Alternative

Where does your data travel? A Performance Nightmare, Increased Risk

Where does your data travel? A Performance Nightmare, Increased Risk -- Part 2

If you were a hacker, where would you focus your efforts? Hackers Changing Their Focus If you were a hacker, where would you focus your efforts?

Thank You