Denial of Service is a family of attacks that attempt to force a target to use up resources (CPU time, memory, bandwidth etc) through flood a target with useless packets, connections or tasks
2
votes
3answers
175 views
Denial of Service on SSL services
When the SSL handshake takes place, is there a point where the computational work done by the client is significantly less than the computational work done by the server?
Could such an imbalance be ...
2
votes
1answer
569 views
How do I protect my Windows computer against the IPV6 flood attack shown in this video
In the DefCon video "Three Generations of DoS Attacks (with Audience Participation, as Victims)", the speaker demonstrates how it is possible to crash a variety of devices by flooding them with IPV6 ...
2
votes
1answer
128 views
Are COMET installations immune to “Slow TCP Reading” DoS on Windows? (Such as SignalR or WebSync)
My understanding is that COMET implementations of WebSync and SignalR do not directly use IIS and are a few layers lower on the ISO model.
After reading Qualys's blog regarding slow TCP reading, I ...
2
votes
1answer
113 views
Reflection Attacks on Server
I was reading a research paper entitled "Steps to Defend Against DoS Attacks" when I came across this point:
"A reflection attack on a server would require server-client-server
communication, ...
1
vote
3answers
2k views
What is HTTP GET/POST Flooding Attack?
I want to know what is HTTP GET/POST flood attack and what are their major differences and mitigation strategies ?
I searched a lot but I really can't find some good articles nor examples about this ...
1
vote
3answers
1k views
How does a DOS attack work when attacking a single server with a single client?
How is it possible to make a DOS attack from a single computer?
Let us assume two computers, one acting as server and the other as client. Both has 100/100 mbit bandwitdh.
How can then the client ...
1
vote
4answers
128 views
How a DOS TCP packet different from normal Packet?
a normal tcp packet shown in figure
How a TCP packet that causes dos attack different from normal Tcp Packet?
1
vote
2answers
535 views
What approaches are to detect DoS attack in IDS/Firewall?
First approach to DoS attack detection: There are techniques for intrusion detection, and of course DoS attack, in which for each packet (or flow) some features are calculated, then based on some ...
1
vote
3answers
443 views
Disadvantages of HTTP GET/POST Flooding Attack?
I asked about What is HTTP GET/POST Flooding Attack? recently and I got a few detailed answers about what they are and how they work.
Now I want to find out what are the disadvantages of them.
1
vote
2answers
278 views
Good steps to survive from denial-of-service attack (DoS attack)
I need to follow several steps to safe our Web Project from DoS attack.
Is there any guideline / steps?
EDIT : We have our own server where we are running several e-Commerce websites. Our server's ...
1
vote
1answer
103 views
DoS and Serialization
I got the following message from Fortify static code analyser.
Incorrect serialization and de-serialization can lead to unpredictable behavior and cause denial of service attacks.
Can anyone ...
1
vote
2answers
233 views
Secure against HTTP FLOOD ATTACK
What is the best way to defend your web site against HTTP FLOOD POST/GET ATTACK ?
1
vote
1answer
106 views
How to know what's the type of an attack and from whom is sent?
I'm currently running a game server on a dedicated Windows 7 machine and it is being attacked.
How do I know what kind of attack it is and from whom is sent?
When he attacks, the RDP freezes and the ...
1
vote
3answers
199 views
Mass account lockout prevention using CSRF tokens
I'm currently working on reducing the risk of mass account lockout on a site that (unfortunately) issues sequential, numeric user IDs. Changing the structure of the userID is not an option at this ...
1
vote
2answers
178 views
How to mitigate SIP Reflection Attacks?
SIP has a practical need to be widely available, but its services are prone to being spoofed as reflectors used in DDoS attacks.
A freeswitch server I manage has seen heaps of registration requests ...
1
vote
1answer
393 views
Snort/IDS detect and alert on possible DoS/DDoS attack?
As per the title, I'm attempting to configure Snort to detect and alert on a incoming Denial of Service attack.
Looking at the rulesets, which are primarily signature based rules, I can't see a ...
1
vote
1answer
152 views
Is a multitenant web app built on Apache Cassandra more resilient against DoS attacks?
Imagine a multitenant web app that stores data in a Apache Cassandra cluster, with fairly many nodes.
Now assume that:
Mallory launches a DoS attack against one tenant. (Perhaps that tenant is a ...
1
vote
0answers
90 views
Is anything written in the book “Internet Denial of Service: Attack and Defense Mechanisms” c2004 still valid? [closed]
I was reading through some of this book on google: http://books.google.ca/books?id=qmdCs_Jf2AEC
It is uploaded to a hungarian website here: http://denialofservice.uw.hu/index.html
I was reading... ...
0
votes
3answers
290 views
Is it possible to “close” a port by dos'ing it?
If I see port 25 is open, but I dont have access to the program running the smtp server, could It be flooded with enough information to make it unusable (but not affect any other services)?
0
votes
2answers
114 views
Denial Of Service attack in asynchronous communication
Is Low rate DOS attack (unintended) possible through asynchronous communication? Consider this scenario:
I have a client server application were there is a WAN communication between the client and ...
0
votes
2answers
79 views
Looking for information about CVE-2006-6876 vulnerability
In order to study vulnerabilities of a SIP server and the impacts of DOS attacks on the QoS of VoIP service, I have found this vulnerability which can be exploited to cause DoS on SIP server.
But I ...
0
votes
2answers
4k views
How to conduct DDoS attack practically? [duplicate]
Possible Duplicate:
How to simulate DDoS attacks from the Internet?
I want to conduct a DDoS attack. Can anyone please tell how can i conduct it? What are the latest DDos attacks? What are ...
0
votes
1answer
115 views
DoS anomaly-based detection: simplest approach beside simple threshold
As I learned, there is this technique in which the number of bytes/packets/frames of aggregated traffic is being checked to see if they deviate from a normal behavior. Then the time slot of that ...
0
votes
2answers
238 views
Securing anonymous accessible URL with a GUID segment?
In my problem there is an existing system that works as a alerting or clipping service that runs user defined searches and generates results lists. These are setup by authenticated users and this ...
0
votes
1answer
123 views
Differentiate normal flow and broadcast attacks
How do you identify whether a broadcast traffic is normal or is considered an attack such as a DoS attack?, There is some information that the plot or the source that allows me to differentiate ...
0
votes
0answers
56 views
SSL vs TLS, which is less vulnerable to DOS attacks?
When I learned TLS does not allow a connection to be created until it is has finished a secure handshake, i figured that would make it better for preventing DoS attacks.
However, all I seem to find ...
-3
votes
1answer
140 views
Why would you want to initiate a DoS attack on a system you are testing?
What is the value of a DoS attack as part of a security assessment? this is the question asked to me in EC council's exam preparation, so need to know. not intending any attack
-4
votes
1answer
236 views
DoSing my Home Network with only a Public IP address [closed]
+--------------------------------------------------------+
| Client Host Name |.. IP Address ..|.... MAC Address ...|
| Desktop-Home ....| 192.168.1.100 | 00:19:D1:EA:03:68 |
| GT-S5380K ...
