4. Application Attacks Decline, But Duration Increases
Application layer DDoS attacks declined 3.8 percent in the first quarter of 2013 compared to the fourth quarter of 2012. The Layer 7 attacks came in the form of HTTP GET floods, which sometimes appear as legitimate traffic and eventually the traffic overwhelms the application running the web server. Widely available commercial and public DDoS kits make GET floods the standard method of attack, Prolexic said. "SSL GET floods add additional stain to the victim web servers as processing power is utilized to decrypt incoming traffic," Prolexic said.