RE: 2009 Worldwide Infrastructure Security Report available for download.

2010-01-21 Thread Pekka Savola
On Wed, 20 Jan 2010, Stefan Fouant wrote: Completely agree on the disturbing observation of the increase in rate-limiting as a primary mitigation mechanism for dealing with DDoS. I've seen more and more people using this as a mitigation strategy, against my advice. For anyone interested in

Re: 2009 Worldwide Infrastructure Security Report available for download.

2010-01-21 Thread Steve Bertrand
Pekka Savola wrote: On Wed, 20 Jan 2010, Stefan Fouant wrote: Completely agree on the disturbing observation of the increase in rate-limiting as a primary mitigation mechanism for dealing with DDoS. I've seen more and more people using this as a mitigation strategy, against my advice. For

Re: 2009 Worldwide Infrastructure Security Report available for download.

2010-01-21 Thread Danny McPherson
On Jan 21, 2010, at 4:34 AM, Pekka Savola wrote: Thanks to Arbor for collecting the report and your observations. One thing I found extremely strange is that almost 50% report they use BCP38/Strict uRPF at peering edge, yet only about 33% use it in customer direction. (Figure 13, p20)

Re: 2009 Worldwide Infrastructure Security Report available for download.

2010-01-21 Thread Danny McPherson
On Jan 20, 2010, at 8:32 AM, Stefan Fouant wrote: I'm wondering if you can clarify why 'Figure 1' only goes up to 2008 and states in key findings This year, providers reported a peak rate of only 49 Gbps. I happen to personally recall looking at ATLAS sometime last year and seeing an

Re: 2009 Worldwide Infrastructure Security Report available for download.

2010-01-21 Thread Dobbins, Roland
On Jan 22, 2010, at 8:08 AM, Danny McPherson wrote: Yep, I think this is simply an artifact of a larger respondent pool size, with many smaller respondents being represented. Correct, as noted in the text, the change in survey demographics appears to be the cause of this shift.

2009 Worldwide Infrastructure Security Report available for download.

2010-01-20 Thread Dobbins, Roland
[Apologies for any duplication if you've seen this notification on other lists.] We've just posted the 2009 Worldwide Infrastructure Security Report for download at this URL: http://www.arbornetworks.com/report This year's WWISR is based upon the broadest set of survey data collected by

RE: 2009 Worldwide Infrastructure Security Report available for download.

2010-01-20 Thread Stefan Fouant
-Original Message- From: Dobbins, Roland [mailto:rdobb...@arbor.net] Sent: Wednesday, January 20, 2010 9:17 AM To: NANOG list Subject: 2009 Worldwide Infrastructure Security Report available for download. [Apologies for any duplication if you've seen this notification on other