Time to Mitigate shall mean the time taken for DDoS Mitigation to take effect once traffic is successfully routed.

TLS/SSL are the cryptographic protocols designed to provide communications security over a computer network. It is widely deployed in a number of applications such as web browsing, email, instant messaging and voice over IP. Transport Layer Security (TLS) protocol aims primarily to provide privacy and data integrity between two or more communicating computer applications. The latest version of TLS is v1.3 which is now the de facto standard. TLS v1.0 has reached the End of Life as deprecating by PCI while its predecessor SSL v1.0, v2.0 and v3.0 shall be disabled due to the weak cryptography supported and the vulnerability exposed.

TLS/SSL Certificate conforms to the X.509 trust model. A digital certificate is signed and issued by a certificate authority (CA) after the requestor information is verified and validated. There are several classes of digital certificates which differ in the information details to be validated and the vetting process.

Top 10 OWASP vulnerabilities means the Open Web Application Security Project, an online community that produces articles, methodologies, documentation, tools, and technologies in the field of web application security, announced the top 10 most critical security risks to web applications that most companies should pay attention to, including Injection Broken Authentication and Session Management • Cross-Site Scripting (XSS) Insecure Direct Object References Security Misconfiguration Sensitive Data Exposure Missing Function Level Access Control • Cross-Site Request Forgery (CSRF) Using Known Vulnerable Components Unvalidated Redirects and Forwards

Traffic Baselining is a process that continuously monitors and learns the traffic profiling of the protected network during peacetime.

UDP Flood is a sessionless networking protocol. In an UDP flood, the attacker sends large volumes of UDP traffic to flood the random ports on the target machine with packets that force it to listen for applications on those ports and report back with an ICMP packet. The goal is to disable the machine or fill the bandwidth up with attack traffic.

UDP Fragmentation is a form of IP Fragmentation.

User Agent refers to the software agent inside the web browser that shares the client information including operating system and browser version to the visiting website. This allows the website to customize the content for the capabilities of a particular device.

Volumetric Attacks are floods of junk traffic sent by the attacker through distributed botnets to overwhelm the target infrastructure. They include UDP floods, ICMP floods, and other spoofed-packet floods. The scale is measured in bits per second (bps).

Volumetric Events is a TCP/OSI layer-3 attack targeting against an IP address to disrupt the service. It is measured in bit per second (bps).

WAF Event (attack) exploits known vulnerabilities to extract confidential information or bring down service. Detected WAF events are reported on the Dashboard of the Customer Portal.

Web Application Firewall (WAF) inspects the content of specific web applications and blocks malicious HTTP traffic to and from a web server.

Web Crawler is sometimes known as a spider or spiderbot or in short form crawler. It is an Internet bot that systematically browses websites for the purpose of web indexing. This is essential for efficient searching.

Web Socket is a full duplex communications protocol over a single TCP connection. It is standardized by IETF as RFC 6455. It is designed to work over HTTP ports 80 & 443 including HTTP proxies. WebSocket handshake uses the HTTP Upgrade header to switch from the HTTP protocol to WebSocket protocol. WebSocket protocol enables interaction between a web client and a web server with lower overheads, facilitating two way, ongoing real-time data transfer from and to the server.

Zero-day Attacks are literally previously unknown attacks, exploiting inefficiencies and vulnerabilities for which no patch has yet been released.

Zombie is a computer that has been compromised by a hacker, computer virus or trojan horse. It is very often used by attacker to launch DDoS attack.

Zone is a portion of the domain namespace in the Domain Name System (DNS) for which the administrative responsibility has been delegated to a single manager. Zones hold DNS records that contain mapping information.

‍