Blog Listing: Security

This blog post is a follow-up to our recent post, “Announcing Upgraded and More Secure Prolexic Attack Reports,” and here we’ll take a deeper dive into one aspect of that announcement. Namely, we’ll explain in greater detail the two new categories of advanced forensics data in Prolexic attack reports: packet capture (PCAP) and top Source IPs (SIPs). Background After a...

No matter what your business is, staying on top of security events and trends is always a priority for developers, admins, and architects. In order to give you a new level of continuous insight into this area, we’re enhancing four of Akamai’s flagship security products: Kona Site Defender, Web Application Protector, Bot Manager, and Client Reputation. By July 2019, these...

One of our primary goals when fighting an attack for our Prolexic customers is to share as much attack information as possible in a quick and secure manner. This process occurs with close coordination between Akamai’s Security Operations Command Center (SOCC) and customers by maintaining runbooks, communicating via various channels, and sending post-action attack reports. These attack reports are delivered...

We’re happy to announce that we’ve just completed the fourth and final phase of our UX upgrades in the Akamai Security Configuration application (see the four phases listed here). This latest version streamlines the process for developers and admins, reduces time to complete tasks, makes protection more complete, and sets a strong foundation for Akamai to add new capabilities for...

As we relentlessly strive to improve the user experience for Akamai customers, I wanted to take a moment to highlight some specific updates coming to our Akamai cloud security products in the next few months. As we roll out these improvements—which will continue from now through June—banner messaging will appear in your Akamai interface to inform you of the latest...

Akamai’s Prolexic Routed is a powerful DDoS defense that protects your data center infrastructure against large, complex attacks. One of the advantages of being protected by Prolexic Routed is that you can get deep insight into the traffic traversing Akamai’s DDoS scrubbing network. Many Prolexic customers—often large enterprises with highly complex network footprints—have told us that Akamai is the only...

We wanted to give you some timely information on the latest update to Akamai’s Web Application Protector. The update includes these changes (click to jump to any selection): Two new attack groups Renamed “Web DoS Attack” group Changes to the home screen Support for wildcard hostnames Coming soon: protection improvements for API traffic Here are further details on each item:...

GraphQL, the Facebook-incubated data query language for APIs, is a fast-growing alternative to REST. The goal of GraphQL is to reduce payload size and give an API client the ability to query for only for the data it needs. GraphQL uses a flexible syntax based on type definitions, describe the exact fields needed. This avoids the problems common to RESTful...

Enterprise Threat Protector (ETP) Advanced Threat is a new bundle offering of ETP.  In addition to the existing DNS protection layer, ETP Advanced Threat offers additional capabilities of URL and payload inspection using inline malware detection and analysis engines. There are two new key capabilities that are being introduced as part of ETP Advanced Threat. ETP Proxy - Analyzes suspicious...

Stopping Attacks, Not Just Chasing CVEs | For years, the traditional model for protecting a Web application was to find every common vulnerability and exposure (CVE) relevant to your platform’s applications and to enable hundreds of individual rules to protect for specific exploits. Most on-premise web application firewalls (WAFs) still operate like this. With today’s rapid application release cycles, that’s...