Incapsula is trying to help sites increase security against attacks

May 28, 2014 13:01 GMT  ·  By

Cloud-based website security and performance service Incapsula has announced the introduction of two new tools built to protect against advanced forms of targeted DDoS attacks.

These should help prevent unprotected DNS servers against DDoS attacks, as well as direct-to-IP attacks on the infrastructure of organizations.

The DNS Protocol Protection is Incapsula’s new solution for a hardened DNS proxy service that protects the customers’ own DNS servers, preventing DNS DDoS attacks from reaching them.

Since such attacks have grown in intensity and frequency in the past several months, the new Incapsula tool should come in handy for many businesses. “By targeting DNS servers that resolve domain names to IP addresses, attackers can effectively take down websites and cloud applications by making them unfindable,” reads the new product’s description.

The second tool brought by the company will stop attackers from mounting direct volumetric attacks on a single IP address or a range of IP addresses. This should prevent exploits on internal websites, FTP servers, email servers and more.

The service makes use of the BGP standard to dynamically reroute traffic through Incapsula’s scrubbing network in the event of an attack, where it is cleansed and routed through a secure GRE tunnel back to the customer.

The company has also unveiled a new packet filtering hardware that increases the volume of DDoS traffic that can be scrubbed through its network. The company’s new custom-built packet filtering hardware appliance has been codenamed “Behemoth” and it can boost processing speed and capacity, while offering full programmability on the data plane.

According to Incapsula, each appliance can process up to 170 Gbps of traffic at line rate, performing filtering, tunneling, and routing.

“We can now protect any IP network via our cloud service, and shut down very aggressive attacks aimed not just at websites and applications, but at core infrastructure. The Behemoth is at the core of our network expansion, geared towards stopping the inevitable Terabit-scale DDoS attacks to come,” said Gur Shatz, CEO and co-founder of Incapsula.

The new tools have already been made available by Incapsula and those who are interested in these solutions can already register.

Incapsula is a company that has made a name for itself by providing websites tools to become safer, faster and more reliable. It offers sites of all sizes web application security, DDoS mitigation, performance optimization and load balancing.

The company has reportedly protected against one of the largest attacks on a website back in October 2013 against Bitcoin trading platform BTC China.