How to Get the Most Out of Your DDoS Testing

Summary: DDoS simulation testing can be run with commercial software or open-source tools, but requires a platform that can start and stop attack simulations on demand and advance approval from parties such as the cloud provider or tool vendor. The article argues white-box testing is more effective than black-box testing because black-box runs can target low-priority services, and it recommends testing production during low-traffic periods, starting with common vectors like TCP or UDP floods, and validating each protection layer individually. It cites a financial institution simulation where the first test failed and three retests were needed to validate the ISP's clean-pipe DDoS protection against Layer 3/4 attacks.
What you should know: The article's own example is a financial institution whose ISP clean-pipe protection failed Layer 3/4 defense on the first test and through three retests - a reminder that contracted DDoS protection can go unverified until someone actually attacks it.

Read the original at The Hacker News ↗