ddos prevention: market growth, deployments, and nss test results

15
DDoS Prevention: MarketGrowth, Deployments,andNSSTestResults

Upload: nss-labs

Post on 17-Jan-2017

371 views

Category:

Technology


0 download

TRANSCRIPT

DDoSPrevention:MarketGrowth,Deployments,andNSSTestResults

2

PresentersThomasSkybakmoenDis1nguishedResearchDirectorNSSLabs,[email protected],[email protected]

3

AnalystAdvisoryServices

Solu1onInsightLibrary

Con1nuousProductMonitoringCyberAdvancedWarningSystem

Backedbyunmatchedsecurityproducttes1ngexper1se

SubscriptionServices

4

UnmatchedSecurityTestingExpertise

Largestlivetes1ngharnessintheworld

Richestmul1-vendortestinfrastructure

Network,endpoint,andcloudtestexper1se

Product/Solu1onInsight

5

Agenda• DDoSpreven1onmarketandgrowth• Drivingdeploymentsintheenterprise• NSSLabs’2016DDoSPreven1onGroupTestresultso TCOo SecurityEffec1venesso Performance

• Q&A

6

StateoftheMarket

•  MarketSize:US$480.7Min2015;US$522.6Min2016(NSSest.)•  Evolvingmarket:Increasingadop1onofcloudandhybridsolu1onsimpac1ngon-premisessales

7

DeploymentDrivers•  Up#me

o  Increasedonlinepresencemeanshigherrisko Marke1ngpresence

•  WhyA+acks?o  $$o Diversionaryo  Poli1cal

•  Defense-in-deptho  5-10min.protec1onwindowo Whenusedinahybriddeploymento  Protec1oninfrontofothernetworksecurityassets

8

DDoSPreventionasTested•  Small-to-mediumenterpriseo Solu1onstargetedatcarrierspacewerenottested

•  On-premisessolu#on1-40Go Stand-alonesolu1onso Canbeusedinhybridsolu1ons,butnottested

•  Tunedforeachofthefourtestareaso Performance,volumetric,protocol,andapplica1onaeackso Nointerac1vetuningduringthecourseofthetest

9

DDoSPreventionGroupTest

SecurityValueMap(SVM)

PRODUCTREPORTS

COMPARATIVEREPORTS

VendorA VendorB VendorC VendorD VendorE

SecurityEffec1veness Performance

TotalCostofOwnership

Compara1vereportsonperformance,securityeffec1veness,&TCO

Deep-divereportsonindividualproductstested

Compara1vesummaryofallaspectsmeasured/tested

10

GroupTestResults:Definitions•  TCOo Purchaseo Maintenance–includingsubscrip1onfeeso Administra1on–includinginstalla1onandtuning

•  SecurityEffec#venesso Equa1on:Mi1ga1on-BaselineImpact*StabilityandReliability

•  TCOperProtectedMbpso Equa1on:3-YearTCO/(SecurityEffec1venessxNSSTestedThroughput)

11

GroupTestResults:ProtectionandTCOMapTCOperProtectedMbpsagainstSecurityEffec6veness

•  Furtherupandtotherightisbest

•  Abovetheline=aboveaveragesecuritySecurityRecommended

12

GroupTestResults:SVM

NSS Labs DDoS Test Methodology v2.0

13

GroupTestResults:Breakdown•  Security

o  SecurityEffec6venessfrom48.0%to90.4%o AverageSecurityEffec6veness:78.8%o  Stabilityandreliability:100%

•  TestedPerformanceo  From1,000to40,000Mbps

•  TCO(2devices+1CMS)o  FromUS$143,740toUS$564,310o Average:$364,208

•  TCOperProtectedMbpso AverageUS$21.13o  FromUS$4toUS$84

14

UpdatedTestsin2016NSSTesting2016

NextGenera1onFirewalls

VirtualFirewalls

BreachDetec1on

NextGenera1onIntrusionPreven1on

DataCenterIntrusionPreven1on

WebApplica1onFirewalls

IndustrialControlFirewalls

WirelessAccessPointSecurity

DataCenterFirewalls

SecureWebGateways

CAWS

CAWS

CAWS

DistributedDenialofService

EnterpriseEndpointProtec1on

CAWS

NSStes1ngcoversover$40Bof2016EnterpriseSecuritySpend

FormalTestCoverage

NewTestsin2016

Con1nuousMonitoringinCAWS

TodownloadtheSVMgraphicshowninthiswebinar,visitnsslabs.comandclickonthisbueon.

Tospeakwithananalyst,orformoreinforma1ononDDoSpreven1onoranyofthesecuritycategorieslistedabove,[email protected],orcall512-498-0000.

Thankyouwww.nsslabs.com