Executive Summary
Provides management with a non-technical summary of Anti-DDoS activities and relevant events.
Defend service availability
DDoS mitigation for servers, web applications and connectivity
Anti-DDoS Protection
DDoS attacks are among the most common and damaging for a company. These attacks aim to make a specific service unusable.
DDoS attacks usually:
Overload the bandwidth by sending numerous requests to a server;
Abuse the machine by using all its resources, rendering it unable to handle traffic;
A DDoS attack can make websites, applications and connectivity unavailable, interrupting services used by customers and staff.
Anti-DDoS detects and mitigates DDoS traffic to keep protected services available and reduce the impact of the attack.
Description
The Anti-DDoS service protects web applications, servers and connectivity through measures configured at the perimeter and on exposed services.
ISGroup manages configuration, monitoring and adaptation of protection over time according to the technologies and architecture in place.
Countermeasures are defined for the volumetric, protocol and application attacks included in scope, to filter malicious traffic and limit the impact on legitimate services.
Protect your services from DDoS
Web Applications
Mitigates DDoS traffic directed at exposed applications
Servers
Applies and maintains mitigation measures on protected servers
Connectivity
Reduces the impact of malicious traffic on connectivity
Specifications
The Anti-DDoS service follows agreed activities for analysis, configuration, monitoring and adaptation of protection.
ISGroup manages the activities included in the service scope and supports the analysis of events related to DDoS attacks.
The Anti-DDoS report
Summarizes configuration, applied protection and events observed within the service scope.
Protection Configuration
Documents the protected scope and the main countermeasures configured.
Events and Operational Guidance
Reports observed events and operational guidance emerging from monitoring.
Anti-DDoS
and compliance
NIS2
Strengthens the availability and continuity of exposed services against DDoS attacks, contributing to business continuity under NIS2 Article 21(2)(c).
DORA
Protects ICT service availability and supports response and recovery within the continuity policy under DORA Article 11.
GDPR
Reduces the impact of attacks on the availability of systems processing personal data, supporting resilience under GDPR Article 32(1)(b).
ISO 22301
Protects the availability of exposed services and supports the business continuity strategies defined by the ISO 22301 management system.
ISO/IEC 27001
Supports the availability and resilience of protected information systems, contributing to redundancy under ISO/IEC 27001:2022 control A.8.14.
NIST CSF
Protects business services from DDoS disruption and contributes to technology infrastructure resilience under the NIST CSF 2.0 Protect function.
Frequently asked questions about
Anti-DDoS protection
Which systems can the Anti-DDoS service cover?
ISGroup Anti-DDoS protects web applications, servers, and corporate connectivity. Assets, flows, and protection boundaries are defined in the agreed scope.
Which activities does Anti-DDoS protection include?
The Anti-DDoS service includes configuration, management, monitoring, and adaptation of protection over time for assets within the agreed scope. Operating methods, responsibilities, and escalation are specified in the proposal.
Is the service compatible with technologies already in use?
The solution is designed without requiring a specific pre-existing technology. Actual compatibility nevertheless depends on the architecture, connectivity, applications, and configurations involved. ISGroup checks these elements before defining the work.
Does Anti-DDoS protection guarantee that the service will always remain online?
No. Protection aims to reduce exposure to and impact from DDoS attacks but does not guarantee absolute availability or absence of downtime. Results and limits depend on the scope, architecture, and attack characteristics. Any service levels must be stated in the contract.
Is Anti-DDoS protection a one-off activity or an ongoing service?
Anti-DDoS protection is an ongoing service: after the initial configuration, it includes management, monitoring and adaptation of protection over time for web applications, servers and corporate connectivity.
Shape your security priorities into a tailored proposal