Dear steemit know a day exchanger facing ddos attacked. i have three predictions about it
Risk will continue to shift from infrastructure to the application layer
As web apps have evolved from basic information and ecommerce functionality to full-fledged online services, their code and customer data have made them an increasingly appealing target for hackers. Not only are they accessible via the open Internet—they’re also woefully underprotected, with the application layer drawing only 3 percent of the typical security budget at a time when it accounts for 30 percent of successful breaches, according to Verizon. While an incident of the magnitude of the Equifax breach can hardly be said to have a silver lining, at the very least it will make it harder for CIOs, CTOs, and CISOs to overlook its lesson: your security resources should reflect the threats you face. In 2018, that’s the application layer, not the legacy idea of a network perimeter.
Containers and serverless computing will transform attack methodologies
As part of the larger trend toward application-layer risk, the increasing adoption of ephemeral infrastructure will have important implications for security. Traditional static infrastructure allows hackers to persist on a compromised host without fear that the host is going to disappear any time soon. With the shift to containers and serverless, the infrastructure can be entirely refreshed rapidly, as often as every hour or even every few minutes. If the box you’re attacking is about to disappear, you’ll shift your attack to the app instead, since it’s not going anywhere.
As the concept of persistence transforms, hackers will adapt along with it: with the most common approach being to target the application instead of the infrastructure.
In the past, the main worry for web applications and APIs were the classic OWASP injection attacks such as SQL Injection, Cross-Site Scripting, Directory Traversal, and others. While these are still valid attack techniques that can be successful for attackers, more often than not, it’s easier for attackers to simply abuse the existing business logic of the applications.
Ask anyone defending an application or an API service and you’ll hear that the things that keep them up at night aren’t a random Cross-Site Scripting flaw, but rather a large scale account takeover attack, misuse of an API, or abusing business logic to disclose PII or perform financial fraud. Often the technical knowledge needed to perform these sort of attacks is far less than exploiting a more technical injection flaw, and as such, we’ll continue to see attackers shift their focus to these styles of attacks.
