Connect with us

E-Business

The Case of Simultaneous, Short Duration DDoS Attacks

Published

on

cyber attack.jpg
Kindly share this post

Over the last decade, DDoS attacks have proliferated, possibly becoming the primary threat for every website or web application.

The ultimate goal is to bring down sites by flooding them with fake requests, usually from multiple locations. The outcome of such attacks ranges from slow page loads to blocking legitimate traffic.

Among the thousands of DDoS attacks that happen every day, you’ll find attacks that last a number of days, as opposed to short-duration attacks that only take a few minutes for attackers to coordinate and launch at a time.

These attacks are becoming much more commonplace, whether the goal is to take a site down or if they’re used as a smokescreen to divert site owners’ attention.

In this article, I would like to share our real life experience with short-duration DDoS attacks, addressing what happens when this type of attack targets multiple sites simultaneously.

5 Short Attacks in 3 Days
We recently witnessed a three day, continuous attack that targeted two domains of a well-known bank.

On the first day, the bank suffered a significant volumetric attack that lasted five to six minutes, but consumed bandwidth at a rate of dozens of gigabytes per second.

Another attack, that lasted fifteen minutes, took place on the second day, targeting the second domain of the bank. On the third day, the same domain that was targeted the previous day was hit with a long duration attack.

We could see that the first and second attacks were reconnaissance attacks, executed to evaluate which of the two domains was more vulnerable. It is clear that the second domain was more susceptible since it was hit much harder in the third attack.

In parallel, we detected that there was another short-duration spike attack that targeted one of our Telco customers.

Just two hours later, there was another attack against a large utility organization. Because of this pattern, we were able to identify that all three attacks were performed by the same attacker and could warn and better protect our customers against further attacks.

Comparing the volume of bandwidth we’ve encountered on the first day of the attacks, to a DDoS attack’s average peak size of 7.39 Gbps, as reported by SCMagazine, we can see that short-duration attacks use large volumes of traffic in short, shotgun-like bursts.

Attackers leverage these short-duration attacks to evaluate which companies and organizations are easiest to infiltrate.

We assume that this also has to do with the availability of resources. These types of attacks are more likely to come from smaller, private groups that are shorter on resources, as opposed to criminal groups or countries which have access to unlimited resources and can therefore launch long-duration attacks from day-one.

Here’s what we’ve seen over time:

Mitigation
When it comes to short-burst attacks, time is of the essence. Attacks are likely to go under the radar and leave no time to respond.

Organizations managing multiple web domains must have the ability to centralize incoming data, preferably by working with the same security vendor across all their domains.

This enables them to predict attacks by analyzing trends and patterns across their sites. Organizations should demand this capability from their security vendors, who should also be willing to use data from various customers in order to predict potential attacks on other customers, as described in the above case study.

We see a growing number of short duration attacks across our customer base. Awareness to this new pattern is key: customers typically assume that the attack is over, while this may actually be a sign for a much larger attack coming through.

In light of this new pattern using services and tools that can aggregate attack information across customers and websites is an ideal way to predict and avoid the massive DDoS attacks about to come.

Yariv Hazony is VP Product at Sentrix, which provides protection against DDOS and other attacks against web applications, www.sentrix.com


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Business

NIPOST Plans Digital Postcodes for Every Building in Nigeria

Published

on

Kindly share this post

Nigerian Postal Service (NIPOST) has reaffirmed its commitment to implementing a National Digital Postcode System to assign a unique digital address to every addressable building across the country.

NIPOST Plans Digital Postcodes for Every Building in Nigeria

Speaking at the unveiling of the Post Code Delineation Model Validation 2026 in Abuja, Tola Odeyemi, postmaster general and chief executive officer, NIPOST, said the initiative would establish a machine-readable standard location-address framework for buildings nationwide.

“Postcode is basically a framework used to have a machine-readable standard location address for every addressable building in Nigeria,” Odeyemi said.

She explained that the project would place Nigeria among the first countries in Africa to develop a postcode system down to the unit level, ensuring that each standing building is assigned a unique code.

According to her, the digital postcode system is expected to enhance service delivery, logistics operations, emergency response, and national planning by improving the identification of locations across the country.

Odeyemi noted that the diversity of Nigeria’s geography necessitated different approaches to address mapping and postcode allocation.

“Nigeria is a large country. We have all the way from the top of Nigeria, which is almost like the Sahel, to the Savannah, to the Middle Belt, to the tropical South and even to the riverine areas.

“The logic that will work for Jigawa is not the same logic that will work for Bayelsa because they have completely different geographical expressions, density of buildings, population distribution, and topography,” she said.

She said the postcode delineation process was designed to ensure that postcode boundaries align with existing administrative structures and do not overlap local government boundaries.

“Delineation has to make sure the postcode does not pass administrative boundaries, and it must not go across two local government areas,” Odeyemi stated.

The NIPOST boss further explained that the validation exercise involves testing aerially mapped polygons against actual settlement patterns and geographical realities in different parts of the country.

“To test the polygons we have drawn aerially, we must ensure they accurately reflect realities on the ground. For example, the density of buildings in Lagos, particularly in Mushin, is very different from the density of buildings in Abuja. We are making sure that density maps and topographical features are properly captured for each state in Nigeria,” she said.

She described the Post Code Delineation Model Validation exercise as a critical stage in the agency’s broader digital addressing initiative, which seeks to create a comprehensive and standardised postcode framework for the country.

Nigeria has long grappled with an inefficient addressing system, making it difficult to accurately identify locations for postal services, logistics, emergency response, and public planning.

NIPOST’s National Digital Postcode System is part of efforts to create a standardised and technology-driven addressing framework that assigns a unique code to every addressable building in the country.


Kindly share this post
Continue Reading

E-Business

The Case for a Holistic AI-Led Approach to Cybersecurity in the Fintech Ecosystem

Published

on

Kindly share this post

As digital financial services continue to grow globally, cyber threats are becoming more advanced, more automated, and more financially damaging. In Nigeria, where digital payments are becoming a part of everyday life, these threats pose significant risks to both consumers and financial institutions.

Industry reports continue to show that account takeover remains one of the dominant fraud issues in Nigeria, accounting for a significant share of 43% banking-related losses reported to Nigeria Inter-Bank Settlement System (NIBSS). Between early 2023 and mid-2025, the financial sector is estimated to have lost hundreds of billions of naira to digital fraud, while 281,500  user accounts have been exposed through breaches and leaks in Q1 alone.

Responding to this kind of threat environment requires more than a single line of defence. It requires a broader security model that combines intelligence, automation, identity verification, and ecosystem collaboration.

PalmPay, leading digital payments platform, has built its cybersecurity framework on a multi-layered security architecture designed to anticipate, detect, and mitigate risks before they escalate. Rather than relying on a single line of defence, PalmPay integrates AI-driven fraud monitoring, continuous risk assessment, behavioural analysis, and multi-layer authentication to strengthen account protection.

One important part of this approach is biometric and facial verification. As account takeover attempts increasingly exploit stolen credentials, identity verification has become one of the most effective tools in combating fraud. By combining facial verification with PIN and OTP authentication, PalmPay introduces multiple layers of protection that help ensure access is tied to the legitimate account owner, significantly reducing the risk of unauthorized access.

Complementing this is PalmPay’s Fraud Case Management System that enhances how potential fraud incidents are detected, analysed, and managed. By centralising fraud intelligence and enabling faster response times, the system helps security teams identify emerging patterns and intervene more proactively.

PalmPay’s Anti-Fraud Manager, Omoruyi Aiyudu, commented: “Fraud prevention today requires a shift from isolated security controls to a connected, intelligence-driven security ecosystem. At PalmPay, we leverage AI-driven fraud detection, behavioural analytics, and multi-layered authentication to identify and mitigate risks in real time. We continue to invest in advanced technologies to strengthen account security and build a safer, more resilient digital financial ecosystem for our users.”

Ecosystem Collaboration

Cybersecurity does not stop at internal controls. Stronger outcomes also depend on collaboration across the wider financial ecosystems.

PalmPay continues to work with regulators, law enforcement agencies and other stakeholders to support stronger cybercrime detection and response capabilities. One example is collaboration with the Nigerian Cybersecurity Unit of the Nigeria Police Force (NPF), including support through the provision of advanced equipment designed to enhance fraud detection and investigation capacity.

The company also recently collaborated with the Nigerian Data Protection Commission on a specialized data protection training to enhance internal data governance practices and advance compliance with the Nigeria Data Protection Act (NDPA) 2023.

These efforts reflect a broader view of security, one that recognizes that customer protection depends not only on technology, but also on governance, institutional cooperation, and responsible data handling.

PalmPay also believes that effective cybersecurity requires active participation from every stakeholder in the digital ecosystem. This is why user awareness remains an important part of its approach. Technology can reduce risk, but informed behaviour remains one of the strongest protections against fraud.

As cyber threats continue to evolve, the future of cybersecurity will depend on organisations adopting intelligent, adaptive, and collaborative security models. AI-led security solutions are no longer optional; they are becoming essential to staying ahead of increasingly sophisticated threats, strengthening customer trust, and the digital economy.


Kindly share this post
Continue Reading

E-Business

Galaxy Backbone @ 20, Pledges Nationwide Connectivity, Data Sovereignty

Published

on

Kindly share this post

Galaxy Backbone (GBB) Limited has mapped out strategies to strengthen Nigeria’s digital infrastructure in order to make the country globally competitive in the face of Artificial intelligence, blockchain, cloud computing and other emerging technologies aimed at securing the digital future of the country.

Galaxy Backbone @ 20, Pledges Nationwide Connectivity, Data Sovereignty

Prof Ibrahim Adeyanju, managing director and CEO of GBB, made this known during a press conference to unveil a flurry of activities to celebrate the 20th anniversary of GBB in Abuja on Monday, stressing that Galaxy Backbone has evolved from a connectivity provider into one of Nigeria’s most strategic digital infrastructure institutions.

Galaxy Backbone is a public enterprise of the Federal Government of Nigeria incorporated in 2006 with the primary mandate of setting up and operating a unified Information and Communication Technology (ICT) infrastructure platform that addresses the connectivity, transversal and other technology imperatives for Ministries, Departments and Agencies (MDAs) of the federal government and private entities.

He said in the last 20 years, the agency has invested in world-class data centre infrastructure, including uptime certified Tier III and Tier IV facilities that provide secure, resilient and reliable environments for hosting missions critical to systems and applications.

He noted that these facilities strengthen data sovereignty, ensure business continuity and help keep Nigeria’s most critical digital assets secure.

“Through our cloud infrastructure and the 1Government Cloud platform, government institutions can access scalable digital services without the burden of building costly infrastructure independently. This shared-services model improves efficiency, reduces costs and accelerates innovation.

“We have delivered platforms such as GovMail (the homegrown Official government email), collaboration tools, hosting services, connectivity solutions and shared applications that support thousands of public servants and hundreds of institutions every day,” he said.

He emphasized that the true value of Galaxy Backbone is not measured by kilometres of fibre, data centres or technology alone but by impact.

He explained that the GBB fibre infrastructure today spans almost 30 states of the federation, connecting government institutions and creating the foundation for digital government even as he pledged that the remaining states and local areas will all be captured in due course.

On cyber security, the GBB boss noted that the agency has strengthened cybersecurity capabilities and continues to invest in protecting government systems and critical national digital assets, against cyber-attacks.

“We have the digital infrastructure and we are collaborating with partners to use these emerging technologies. We also have a top tier cyber security operation center and they are multilayered such that even when there is a spike in cyber-attacks none of them have been successful so far.

He added that the GBB is collaborating with other government agencies like the National Security Adviser, The Nigeria Police, and Nigerian Communications Commission (NCC) National Information Technology Development Agency (NITDA) National Identity Management Commission (NIMC) to ensure that government information is protected.

Ibrahim Sani Mohammed, executive director Finance and Corporate Services of the GBB, while fielding questions noted that the agency has created enormous value and has contributed immensely in the digital ecosystem of Nigeria helping to support small and medium enterprises (SMEs).

Olusegun Olulade, executive director Customer Centrality and Marketing of the GBB, said that customers have remained the formidable partners in the GBB journey of 20 years, adding that the agency has developed the mechanism to ensure customer satisfaction as it intensifies efforts to build trust.


Kindly share this post
Continue Reading

Trending