RIOS Attack Mitigation Response Times
Mitigation of DDoS attacks occurs in two stages – attack detection and attack mitigation. For many DDoS attacks the detection and mitigation occur in the same step. In others, the detection phase is used to identify attack traffic and attackers and to differentiate it from good traffic. RIOS attack mitigation, then, surgically filters only attack traffic without impacting good traffic to the same host or network.
| Detection Time | Mitigation Time | Attack Type |
|---|---|---|
| 30 seconds | 30 – 60 seconds | Spoofed TCP SYN floods (AT1, ST1) |
| 30 seconds | 30 – 60 seconds | Spoofed TCP SYN-ACK floods (AT2, ST1) |
| 90 seconds | 0 – 90 seconds | TCP Session attacks (AT8) |
| 30 seconds | 30 – 60 seconds | TCP Port Sweep and Port Scan attacks (AT9) |
| 30 seconds | 30 seconds | TCP layer 7 attacks (AT10, AT11, AT12, AT13) |
| 30 seconds | 30 seconds | Application Specific Filters - Regex and HTTP Rules (AT61) |
| 10 seconds | 30 seconds | Spoofed UDP floods (AT17) |
| 10 seconds | 30 seconds | Spoofed ICMP floods (AT23) |
| 0 seconds | 0 seconds | All other attack types |