Distributed Denial Of Service (DDOS) is the intentional paralyzing of a computer network by flooding it with data sent simultaneously from many individual computers (so-called zombies) which are used to stage DDOS attacks
2
votes
2answers
185 views
Can an attacker slow down my server without compromising it?
We have a Linux server with WHM/cPanel which has been running without problems for almost 3 years now.
Yesterday, the server became unresponsive (it was definitely there though) for around an hour. ...
2
votes
3answers
503 views
DDoS on LAN: How to Defend?
DDos on a wired network has to be extremely rare, since the intruder has to be physically connected to the network. However, let's say that it still managed to happen. How would you be able to defend ...
2
votes
2answers
2k views
IPTables DDoS protection working with per client IP address counter AND UDP
I am looking to protect LAMP server with a software, which will detect above average number of requests from single IP numbers (in this case DNS queries), and add these hosts to IPTables deny chain.
...
2
votes
3answers
744 views
Protection against DDoS when using proxies
We're trying to protect some sites that are primarily located in Asia using distributed caching. These sites commonly come under DDOS attacks. We are using fail2ban, but still have two problems:
...
2
votes
2answers
1k views
Stopping DDOS TCP SYN and UDP flood attacks
I would like to know if it's possible to stop a TCP SYN OR ICMP Flood attacks if these attacks are detected at time. What is the most accurate process to filter these addresses if the only way is to ...
2
votes
3answers
175 views
Denial of Service on SSL services
When the SSL handshake takes place, is there a point where the computational work done by the client is significantly less than the computational work done by the server?
Could such an imbalance be ...
2
votes
3answers
254 views
Why is it easy to detect network layer DDoS attacks?
I have seen numerous research papers that claim it is "easy to detect network layer DDoS attacks" without saying why. Usually these research papers focus on detection or prevention of application ...
2
votes
1answer
85 views
Types of attacks outside of AppSec and Vendor-Specific Systems?
I'm reading up on the OWASP Top 10 for helping me defend my web app against common "app sec"-type attacks (SQL Injection, CSRF, etc.). And in a recent question I was prompted to not only use OWASP Top ...
2
votes
1answer
656 views
How should I configure a Citrix Netscaler to protect against HTTP, TCP, or UDP flood attacks?
I have a Citrix Netscaler and want to configure the appliance appropriately so that it can protect my hosts from a DDOS. Is this something I can do here, or must I take action on the host itself?
1
vote
2answers
1k views
DDoS Protection for DNS providers
Zerigo, our DNS provider has reported to have been under heavy DDOS attack in the last 24 hours or so. Considering the distributed nature of DNS, and their architecture consisting of 5 main DNS ...
1
vote
1answer
86 views
Botnet Attempting to Login to Website
Our server has recently become a target of what appears to be a botnet attack. The first indication was an insane amount of traffic to one of our client's websites - so heavy that the server entirely ...
1
vote
2answers
1k views
How much does it cost to protect your website against DDOS, by tier?
Cross-posted to Quora
Today several financial institutes in Israel (banks, stock exchange) were DDOSed. They decided to block all foreign IPs as a first aid measure.
While I agree that it was ...
1
vote
2answers
1k views
what is the Akamai Name Server i see at some big companies
I have played with DNS a lot lately, and i have found that some big companies's web sites uses the Akamai NS as the Name Server for thier WWW servers, for example:
$>nslookup
> www.redhat.com
...
1
vote
2answers
176 views
How to mitigate SIP Reflection Attacks?
SIP has a practical need to be widely available, but its services are prone to being spoofed as reflectors used in DDoS attacks.
A freeswitch server I manage has seen heaps of registration requests ...
1
vote
0answers
89 views
Is anything written in the book “Internet Denial of Service: Attack and Defense Mechanisms” c2004 still valid? [closed]
I was reading through some of this book on google: http://books.google.ca/books?id=qmdCs_Jf2AEC
It is uploaded to a hungarian website here: http://denialofservice.uw.hu/index.html
I was reading... ...
0
votes
3answers
117 views
DDOS protection for instant messenger server
I developed an instant messenger which uses TCP ports for its communication, and hosted the server application on a VPS account from some hosting company, but the first day I got attacked by a ...
0
votes
1answer
665 views
Monitor incoming TCP/UDP flood attack and graph it
I'm preparing a presentation on a security issue and want to include a demonstration. It won't be in real time, I just need to show some pictures of the results.
I have some VPSes that will perform a ...
0
votes
2answers
79 views
Looking for information about CVE-2006-6876 vulnerability
In order to study vulnerabilities of a SIP server and the impacts of DOS attacks on the QoS of VoIP service, I have found this vulnerability which can be exploited to cause DoS on SIP server.
But I ...
0
votes
1answer
428 views
My server is being DDoS'ed with 13 gbit and my provider nulled my ip, taking down my server - what can i do [duplicate]
Possible Duplicate:
How can a Software application defend against DoS or DDoS?
Accessing a site (which is) under a DDoS
Null-routed IP
85.17.154.139 8/5/12 In progress 13Gb ddos
...
0
votes
2answers
4k views
How to conduct DDoS attack practically? [duplicate]
Possible Duplicate:
How to simulate DDoS attacks from the Internet?
I want to conduct a DDoS attack. Can anyone please tell how can i conduct it? What are the latest DDos attacks? What are ...
0
votes
1answer
245 views
DDoS prevention (LOIC doesn't do the job anymore) [closed]
We are about to launch a important webservice. We must test it for DDoS. From other questions/answers here I learned about LOIC. Downloaded, tried, but my apache refuses it.
What other ready made ...
0
votes
0answers
55 views
SSL vs TLS, which is less vulnerable to DOS attacks?
When I learned TLS does not allow a connection to be created until it is has finished a secure handshake, i figured that would make it better for preventing DoS attacks.
However, all I seem to find ...
0
votes
0answers
159 views
Snort Parallelization Techniques and its effect on DDOS detection capability
I want to ask a query about snort parallelization.
1) Can snort detection rate remains same for all attacks after parallelisation?
2) As the parallelisation of netowrk traffic in each core is based ...
-1
votes
1answer
389 views
Linux tools to choose suitable Cisco ASA 5500
I have a linux webhosting server which affects a high DDOS.
I want to use Cisco ASA 5500 Series Adaptive Security Appliances to protect the linux server from this DDOS. I know there are many factors ...
-2
votes
1answer
152 views
Spoofed DDoS mitigation / DNS amplification mitigation [duplicate]
Recently my server has been attacked multiple times, after looking at my firewall I've come to the conclusion that the IP's are spoofed. (10,000+ IP's connect at once)
I'm running Win server 2012 x64 ...
-4
votes
1answer
232 views
DoSing my Home Network with only a Public IP address [closed]
+--------------------------------------------------------+
| Client Host Name |.. IP Address ..|.... MAC Address ...|
| Desktop-Home ....| 192.168.1.100 | 00:19:D1:EA:03:68 |
| GT-S5380K ...
