{"id":26688,"date":"2024-07-23T17:54:54","date_gmt":"2024-07-23T17:54:54","guid":{"rendered":"https:\/\/blog.lacnic.net\/?p=26688"},"modified":"2024-09-23T14:37:35","modified_gmt":"2024-09-23T14:37:35","slug":"security-threats-and-controls-for-mitigating-dos-ddos-attacks","status":"publish","type":"post","link":"https:\/\/blog.lacnic.net\/en\/security-threats-and-controls-for-mitigating-dos-ddos-attacks\/","title":{"rendered":"Security Threats and Controls for Mitigating DoS\/DDoS Attacks"},"content":{"rendered":"\n

By Graciela Mart\u00ednez<\/a> and Guillermo Cicilieo<\/a><\/p>\n\n\n\n

DoS\/DDoS (Denial of Service\/Distributed Denial of Service) attacks are one of the most common concerns for ISPs. Due to their role in digital infrastructure, ISPs are attractive targets for cybercriminals who can attempt to compromise their network, disrupting their different services.<\/p>\n\n\n\n

In this context, we conducted interviews with professionals from various organizations in Latin America and the Caribbean. Our goal was to understand their perspective and based on their experience, have an initial overview of the security threats they face and the extent to which they have implemented controls for their mitigation.<\/p>\n\n\n\n

During this findings identification phase, we detected key aspects of the most common issues faced by ISPs.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

More actions are necessary<\/strong><\/p>\n\n\n\n

According to the interviewees, all organizations recognize the importance of cybersecurity for protecting assets and ensuring business continuity, yet many acknowledge the need to continue working on implementing more actions<\/strong>. Indeed, there is an awareness that cybersecurity must be included in an organization’s roadmap as part of its strategy. However, it is often not considered a strategic objective and, instead, security activities are scattered across daily operations.<\/p>\n\n\n\n

To deal with the challenges that are emerging in the digital landscape in organizations such as ISPs, it is essential to proactively protect the infrastructures that support the business and promote a safe and reliable online environment for all.<\/p>\n\n\n\n

According to information provided by the experts we consulted, the main reasons for this management issue can be divided into the following aspects:<\/p>\n\n\n\n

    \n
  1. Overdue updates. The lack of hardware, software, and firmware is a common threat.<\/strong> Failure to manage updates and patches represents a risk for organizations, as outdated systems are one of the main attack vectors exploited by cybercriminals.<\/li>\n<\/ol>\n\n\n\n