Countering 101,720 cyber attacks in the winter of 2024

 

TIC could be able to resolve 101,720 (DDoS) Attacks against national Infrastructure network in last winter.

TIC reported that this document details hypothetical scenarios, core definitions, organized cyber attacks targeting the nation's critical infrastructure, general statistics, statistical awareness, distributed denial-of-service (DDoS) threat data, and comparative DDoS attack statistics.

"In the report regarding the winter of (2024-2025), an effort has been made to transparently analyze and present the available statistics on the status of distributed denial-of-service (DDoS) attacks. Additionally, all the statistics in this report are based on the analysis of DDoS attacks conducted over a three- month period."

"Part of this report states that the primary objectives of presenting this report are public and specialized awareness-raising, inspiring hope among ICT professionals, and providing a performance report on a small portion of the actions taken by ICT to the people of Iran."

The report adds: "This winter, 101,720 attacks were countered, with over 82.12% of the attacks aimed at depriving people of essential services, which were successfully resolved through the efforts of the country's experts. The average number of daily attacks was 1,130 in the winter of 2023-2024.

"Additionally, the average duration of attacks has been reported as 5 minutes and 18 seconds, with 47 out of every 100 attacks being carried out through the network of infected devices, and 11 out of every 100 attacks having a capacity of over 10 gigabits per second.

In another part of this report, the analytical statistics of distributed denial-of-service (DDoS) attacks have been reviewed, stating that 114 targets have been attacked more than 250 times, while over 5,215,690 targets have been protected."

"Furthermore, another part of the report analyzing the origins of the attacks states that more than 57% of the attacks originated from just 10 countries. It should be noted that many of these attacks were carried out using infected devices connected to the network without the knowledge of the actual users."