Distributed Denial Of Service (DDOS) is the intentional paralyzing of a computer network by flooding it with data sent simultaneously from many individual computers (so-called zombies) which are used to stage DDOS attacks

learn more… | top users | synonyms

0
votes
3answers
171 views

DDOS protection for instant messenger server

I developed an instant messenger which uses TCP ports for its communication, and hosted the server application on a VPS account from some hosting company, but the first day I got attacked by a ...
0
votes
1answer
1k views

Monitor incoming TCP/UDP flood attack and graph it

I'm preparing a presentation on a security issue and want to include a demonstration. It won't be in real time, I just need to show some pictures of the results. I have some VPSes that will perform a ...
0
votes
2answers
102 views

Looking for information about CVE-2006-6876 vulnerability

In order to study vulnerabilities of a SIP server and the impacts of DOS attacks on the QoS of VoIP service, I have found this vulnerability which can be exploited to cause DoS on SIP server. But I ...
0
votes
1answer
95 views

DDoS attacks targeting Android

I am currently studying some Android topics and I've been having difficulties finding answers regarding DDoS attacks. My question is: Are Android devices vulnerable to DDoS attacks or does Android ...
0
votes
2answers
74 views

Hijack attacked SSL/TLS-connections?

I think we all heard the news that China used unencrypted HTTP-connections to drive DDoS attacks on targeted websites. Now within the last few months we've learned about three new attacks ...
0
votes
1answer
115 views

What are the repercussions of a DDoS attack on a website? [closed]

First of all, I'd like to know what exactly a DDoS attack is- my understanding is that it's a collection of infected or "zombie" computers, all controlled by a central computer, with the intent of ...
0
votes
2answers
160 views

Udp ddos prevention

Okay,if i wanted to prevent a udp flood are these 2 solutions sufficient: -Say that i have only one port open like port 80 however i never use udp interactions what if i blocked the udp port leaving ...
0
votes
1answer
64 views

What are features of a suitable tool for tracking and reporting security incidents? [closed]

What are features of a suitable tool for tracking and reporting security incidents? Is it a bad idea to have one central repository for tracking all types of incidents, from helpdesk issues, to ...
0
votes
1answer
115 views

Finding the method of attack [closed]

My server has been repeatedly attacked in the last few days. Here's the observations: The ISP server traffic monitor shows the incoming traffic goes up to 300Mbps (with no outgoing traffic), and ...
0
votes
2answers
1k views

A DDOS attack by uploading a few hundred large files - whats stopping anybody?

I am new to the IT Security field and am essentially a developer as opposed to a networking person hence the question may be a dumb one I am writing a REST service exposed to the internet which ...
0
votes
1answer
1k views

My server is being DDoS'ed with 13 gbit and my provider nulled my ip, taking down my server - what can i do [duplicate]

Possible Duplicate: How can a Software application defend against DoS or DDoS? Accessing a site (which is) under a DDoS Null-routed IP 85.17.154.139 8/5/12 In progress 13Gb ddos ...
0
votes
1answer
158 views

Is there a layer 1, 2, 5 and 6 DDoS attack? [closed]

I'm doing some research on DDoS attacks, and I seem to only be finding information on layer 3,4 and 7 attacks. When I saw 3/4 and 7 DDoS attacks, I figured they were the most popular, but there were ...
0
votes
1answer
45 views

System backup in case of attack?

My system will be running for a well known insurance company within the UK, it will hold and process a lot of information for claims, brakdowns etc etc. I am worried that the company and the site as ...
0
votes
2answers
97 views

Is this a DDOS attack?

I lost my internet connection for about 15 minutes and I checked my netgear router log and found these 3: [DoS Attack: ACK Scan] from source: 114.77.184.189, port 44822, Tuesday, March 24,2015 ...
0
votes
1answer
75 views

DDoS Detection devices available in the market? [closed]

Wanted to know what DDoS detection devices are currently available in the market.My organisation has its dedicated firewalls and routers.But we wanted to know if there are any devices in the market ...
0
votes
1answer
72 views

rate limiting and access filter for web application

I had a requirement of rate limiting and dynamically access controlling access to web application dynamically I want to be able to rate limit access turned on / off dynamically black/white list ...
0
votes
3answers
139 views

Theoretical game server DDoS prevention question

I may not understand how DDoS attacks work at this point, but Im just wondering if this would work for a game server? IF each time a new connection is attempted and the packet or connection type is ...
0
votes
1answer
88 views

Ongoing DDoS: What is the next step after being able to handle it?

Our websites have been the target of an increasing DDoS, the reason is unknown. Right now, we have taken enough precautions to reliably identify and filter the problematic requests (approx 1 mio/day ...
0
votes
1answer
138 views

distinguish between bots and legitimate clients [closed]

If an attack (DoS & DDoS) involves thousands of bots, how can the server distinguish them from legitimate clients?
0
votes
1answer
1k views

Strange flood of requests to my web server

About an hour ago, strange requests began showing up in my access logs. They are coming in at a rate of ca. 400 req/s and appear to come from IPs all over the place. It started out at a lover rate and ...
0
votes
1answer
124 views

Identifying attacks by network activity

Is it possible (and how) to tell from a network dump if there is a buffer overflow attack, DoS or brute force attack? A DDoS would be more obvious to identify, but those attacks mentioned above I ...
0
votes
1answer
298 views

what type of attack does LOIC do? [closed]

I have used LOIC (Low Orbit Ion Cannon) earlier . Today i was reading on wikipedia that there are many types of dos attacks , namely SYN attacks , HTTP flooding ,UDP flooding ,etc and two questions ...
0
votes
1answer
220 views

What packet parameters should be checked to detect layer-7 DDoS attack?

What packet parameters should be checked to detect layer-7 DDoS attack (http flood, slow http request etc.)? Do window size and packet timeline show enough information to detect attack traffic from ...
0
votes
3answers
2k views

Can one use IP-spoofing to anonymize DDOS attacks?

Since it is possible to fake the source-ip of an ip-package, is it also possible to anonymize DDOS-attacks?
0
votes
1answer
2k views

What is the difference between SYN cookie, SYN cache, and SYN proxy?

I am trying to understand some techniques regarding SYN flood prevention and there are three terms I couldn't find a clear explanation of. The terms that are confusing me are: SYN Proxy SYN Cache ...
0
votes
1answer
3k views

What methods are there of protecting a VPS from DDOS attacks? [duplicate]

I was just wondering what would be the best way to stop a VPS from being attacked, bandwidth would be a problem in this case so methods that reduce the amount of incoming attacks and stop sending ...
0
votes
1answer
674 views

DDoS prevention (LOIC doesn't do the job anymore) [closed]

We are about to launch a important webservice. We must test it for DDoS. From other questions/answers here I learned about LOIC. Downloaded, tried, but my apache refuses it. What other ready made ...
0
votes
0answers
18 views

Behaviour of DNS query packet

When the configured name server resolver is not reachable, the query packet will retransmitted after certain t times (in windows, every 1 seconds until 8 seconds,max). The behaviour of the legitimate ...
0
votes
0answers
37 views

Slow internet, IP Flood? [duplicate]

Lately, I've been getting slow internet. I checked wireshark and noticed I keep receiving in matter of seconds thousands of UDP packets that my computer does not respond to, and here's the twist: ...
0
votes
1answer
362 views

Am i getting DDOS attacked?

There has been some weird activity with my wifi router after somebody threatened to ddos me. I am looking at my wifi router's activity logs and i don't know what i am looking for. What happens is my ...
0
votes
0answers
169 views

Is there any method to prevent/trace ddos attack?

I have a debian linux server which run a few online game services. I have some competitors in this area and i think one of them is behind the ddos attacks. I have full access to the router, so I set ...
0
votes
0answers
89 views

Blocking IP After multiple connection with Netsh advfirewall to mitigate DDos

Hello I wanna block Ip address if they exceed 20 connections with port 80 TCP for HTTP Server. I wanna do this using Netsh advfirewall, In Linux I use IPTables: iptables -I INPUT -p tcp --dport ...
0
votes
1answer
362 views

API Key DDOS prevention method

Hi I just wanted some feedback on a DDOS preventing php script that I'm designing. It quite simple and I wanted some feedback on whether you guys think it would be effective. I'm currently using the ...
0
votes
2answers
835 views

What could be the reason for the high traffic on the local network? [closed]

In our small company we have very high traffic outbound from local network to server which is getting blocked, and slow downs our server respond time. Especially at night. I am not security ...
0
votes
1answer
478 views

Preventing DDoS from faked IP address [duplicate]

According to this answer, it's possible to send a network packet with a forged source IP address. So, what methods a server administrator can take to prevent/block a countless requests from faked IP ...
0
votes
1answer
91 views

Possible virus hogging bandwidth [duplicate]

My computer might have a virus infection. I have used Norton Internet Security and Power Eraser to scan the computer but it still did not work. The traffic on my PC looks like this I used resource ...
-1
votes
1answer
229 views

Why do I target the proxy server if I send a DDoS attack from it?

I once read that if I send a DDoS attack via a proxy (for example with LOIC), I won't target the server I am trying to send a DDoS attack to but I will actually DDoS the proxy server. Most important ...
-1
votes
1answer
85 views

Slow internet - Worried about spammed packets

got a weird question and I'm not sure if I should even post this on here but I couldn't think of anywhere better to ask. Lately, I've been getting some internet speed issues. I closed literally every ...
-1
votes
1answer
281 views

How does IP Spoofing increase the upload speed?

I was talking earlier to a script kiddie and claimed that IP spoofing can increase the upload speed in a DDOS attack?! that does not make any sense to me According to him if your server has an upload ...
-1
votes
1answer
66 views

dns reflection attack vs dns amplification attack

Over the past few weeks I have hard the discussion of a DNS reflection attack and a DNS amplification attack. Is there truly a difference between the two or are people just using 2 different names ...
-1
votes
2answers
131 views

I don't understand how BIPS got hacked [closed]

http://www.networkworld.com/news/2013/112513-bitcoin-robbery-276352.html In this story we can see BIPS got hacked, but I don't get how it was hacked when it was offline because of the DDoS.
-1
votes
1answer
141 views

Can the attacker launch a sufficiently large SYN flood to overwhelm the victim's server?

Suppose that the victim's web server infrastructure can process 200,000 TCP connection requests per second. Assume that a single connection request (TCP initial SYN) requires 40 bytes to transmit. The ...
-1
votes
1answer
637 views

How to prevent ddos and brute-force attack by restricting IP's on Wordpress website

I want to make wp-login.php and/or wp-admin accessible only from one country. If I want wp-login.php access only from USA then my approach from .htaccess is like below <Files wp-login.php> ...
-1
votes
1answer
706 views

Azure Based DDOS Mitigation, Azure Based Firewall?

I'd like to mitigate DDOS attacks, for an Azure vm server (just TCP ports 80 and 443). Azure appears to be a great solution. I can't find any Azure documentation, as to if there is an Azure ...
-1
votes
1answer
60 views

Mitigate DDos on Windows box

I would love to know, If you know some way to mitigate DDos/Dos attacks on Windows. In Linux we can Mitigate using the IPTables Almighty, but I wonder If there is something like that in Windows. ...
-2
votes
3answers
1k views

How to identify if my site is vulnerable to DOS/DDOS attacks? [closed]

I am hosting a site on a hosting server. How to identify whether my site is vulnerable to DOS/DDOS attacks?
-2
votes
1answer
102 views

What would a typical packet of a DDOS attack look like? [closed]

In terms of header, size and payload? We've been learning about DDOS attacks in class and they've been telling us all of the abstract ideas, but haven't told us what the actual makeup of the packets ...
-2
votes
1answer
834 views

Linux tools to choose suitable Cisco ASA 5500

I have a linux webhosting server which affects a high DDOS. I want to use Cisco ASA 5500 Series Adaptive Security Appliances to protect the linux server from this DDOS. I know there are many factors ...
-2
votes
1answer
433 views

Spoofed DDoS mitigation / DNS amplification mitigation [duplicate]

Recently my server has been attacked multiple times, after looking at my firewall I've come to the conclusion that the IP's are spoofed. (10,000+ IP's connect at once) I'm running Win server 2012 x64 ...
-4
votes
1answer
254 views

Hacking through a firewall [closed]

couldn't you DDOS attack an firewall somehow so that it would shutdown and you could access the computer?