1 00:00:00,330 --> 00:00:02,350 How to identify a deadly attack. 2 00:00:03,300 --> 00:00:10,800 Now the most obvious symptom of the US attack is a site or service suddenly becoming slow or an available. 3 00:00:11,900 --> 00:00:17,510 But since a number of causes, such as a legitimate spike in traffic, can create a similar performance 4 00:00:17,510 --> 00:00:20,810 issues, further investigation is usually required. 5 00:00:22,160 --> 00:00:31,130 So Tropica analytics tools can help you spot some of these telltale signs of a attack, suspicious amount 6 00:00:31,130 --> 00:00:38,000 of traffic originates from a single IP address or IP range, a flood of Jovic from users who share a 7 00:00:38,000 --> 00:00:45,740 single behavioral profile, such as device type geolocation or web browser virgin unexplained surge 8 00:00:45,740 --> 00:00:53,810 in the quest to a single page or endpoint or traffic materials such as spikes at all hours of the day 9 00:00:53,810 --> 00:00:56,280 or materials that appear to be a natural. 10 00:00:56,540 --> 00:00:58,280 For example, spike every 10 minute.