Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Any programmer is interested in securing his website. So I found this http://www.youtube.com/watch?v=DB4eMFrQYiY&feature=youtube_gdata_player which talks about crashing a website using cmd only. How to secure any website against this type of attak. Since anyone can do it which makes things harder.

share|improve this question
1  
You forgot the link to the YouTube video (see original question on SO). However, I don’t see how a ping would result in a PHP warning caused by malformed regular expression used with eregi. –  Gumbo Mar 30 '13 at 18:04
    
This has to do with the firewalls. Normally firewalls dont allow ICMP ping messages inside the system. Suppose they allow and see a lots of request originating from a particular sender, the ideal firewall should mark them and prevent further entry into system. –  Ganapathy Subramanian Mar 30 '13 at 18:22
    
@GanapathySubramanian - that doesn't answer the question that the OP asked. –  Rory Alsop Mar 30 '13 at 20:17
    
@Rory Alsop Yes I do agree that we can't attack a server just by using ping from command prompt. We need a DDOS as pointed by Adnan. I was trying to answer this question "How to secure any website against this type of attak". So I was pointing that it should be mitigated by Firewall. –  Ganapathy Subramanian Mar 30 '13 at 21:12
add comment

1 Answer

up vote 14 down vote accepted

Ping of Death attacks are things of the past. Operating systems no longer freak out when assembling large fragmented ICMP packets.

That video is trying to demonstrate a ping flooding attack, a DoS attack in which he's trying to send more ICMP packets than what the server can handle. Chances are that the server being "attacked" has bigger downlink that the attacker's uplink. Allow me to demonstrate.

The guy in the video is trying to do something like this:
weak_dos

As you can see, he'll never be able to flood the server's downlink/resources. For this attack to be successful you need something called a Distributed Denial of Service attack (DDoS), in which a large number of attackers try to flood the server's resources

ddos

To learn about mitigating DDoS attacks, you can start by checking this question about different techniques used by firewalls.

share|improve this answer
7  
+1 for nice pictures :D –  Matrix Mar 31 '13 at 9:04
2  
@Matrix Yeah, my amazing GIMP skills. –  Adnan Mar 31 '13 at 11:47
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.