Does network detection stop DDoS attacks, and how does it differ from DDoS protection?
No, and the difference is where each works. A distributed denial-of-service (DDoS) attack floods your website, VPN or internet line with traffic from many machines until it can no longer answer. Stopping it needs capacity in front of you: your internet provider, a content delivery network or a scrubbing service that absorbs and filters the flood before it reaches your line. Network detection inside your company, such as NetSenX, watches the behaviour of your own hosts to find intruders, beaconing, scanning, lateral movement and data leaving; it neither blocks traffic nor has the bandwidth to absorb a flood. Ask your provider what DDoS protection your line has today, and for public services consider a protected hosting setup. Some DDoS attacks serve as a distraction, so check that nothing else is happening inside while the outage lasts.
Read next
Related questions
- What does NetSenX give us during an incident?
- A supplier with access to our systems has been hacked. What do we do?
- Is it a compromised account or a compromised device, and why does it matter?
- What are the early warning signs of ransomware on a network?
- Can network monitoring detect ransomware before encryption?