Denial of Service is a family of attacks that attempt to force a target to use up resources (CPU time, memory, bandwidth etc) through flood a target with useless packets, connections or tasks

learn more… | top users | synonyms (1)

1
vote
3answers
136 views

What are some good ways to prevent a malicious visitor from maxing out our customer's API maximum allowed service calls?

We run an API service. We gave our customer a package for max limit of 12000 API calls / day. He reported to us that a user has been on purposely visiting his web page 12,000 times a day in order to ...
1
vote
1answer
145 views

What types of hacking attacks happen alongside a DOS or DDOS attack? [closed]

I'm trying to find some good material on this topic for a paper I'm trying to write for class. Any and all help is very much appreciated.
1
vote
1answer
326 views

Is a multitenant web app built on Apache Cassandra more resilient against DoS attacks?

Imagine a multitenant web app that stores data in a Apache Cassandra cluster, with fairly many nodes. Now assume that: Mallory launches a DoS attack against one tenant. (Perhaps that tenant is a ...
1
vote
1answer
139 views

Slow Loris Incomplete GET Request

A slow loris attack is an attack of incomplete GET requests to most famously an Apache server because the server does not timeout the connection made after extremely long periods of time, from my ...
1
vote
0answers
87 views

How can I launch DHCP starvation attack in WLAN?

In WLAN, due to MAC association on Access Point (AP), I can't send the DHCPDISCOVER messages using random MAC addresses. But if I keep my original MAC address as the source ethernet MAC a and random ...
1
vote
0answers
68 views

DOS attack to increase packets received from a single request?

Is there any attack out there that can be implemented where a single request to a server i host for example responds by sending the same file say 20 times back ? the idea behind the attack is to DOS ...
1
vote
0answers
676 views

Akamai or Incapsula (or other) for CDN with DDoS Protection? [closed]

One of our clients is launching a new site and I've been tasked with making a short overview of the advantages/disadvantages of Akamai, Incapsula or other CDN providers who are strong with DDoS ...
1
vote
0answers
1k views

Ping Of Death reconstruction against a Windows 95 virtual machine

For the sake of demonstration, I'm trying to perform a Ping Of Death sent from a Kali Linux virtual machine to a Windows 95 virtual machine (vmware) on a private network. I've set both vms correctly, ...
1
vote
0answers
437 views

Snort not showing dropped/blocked packets

This question is about SNORT- I m basically trying to detect PING FLOOD attack. I have included the rule**(drop icmp any any -> any any (itype:8; threshold, track by_src, count 20, ...
1
vote
0answers
451 views

Is anything written in the book “Internet Denial of Service: Attack and Defense Mechanisms” c2004 still valid? [closed]

I was reading through some of this book on google: http://books.google.ca/books?id=qmdCs_Jf2AEC It is uploaded to a hungarian website here: http://denialofservice.uw.hu/index.html I was reading... ...
0
votes
5answers
870 views

How a DOS TCP packet different from normal Packet?

a normal tcp packet shown in figure How a TCP packet that causes dos attack different from normal Tcp Packet?
0
votes
3answers
528 views

Is it possible to “close” a port by dos'ing it?

If I see port 25 is open, but I dont have access to the program running the smtp server, could It be flooded with enough information to make it unusable (but not affect any other services)?
0
votes
2answers
153 views

How to prevent Cookie-Bombs?

Egor Homakov made a nice writeup (Cookie Bomb or let's break the Internet) on how to crash CDNs and other websites with cookies. Although this is a user/browser-side DOS, I'm wondering how one would ...
0
votes
2answers
491 views

Can someone help? I'm getting Dossed!

So basically since a few days my internet started being very slow. I checked my router logs and guess what! In the log where it is a record of DoS attacks it showed something like |Description ...
0
votes
1answer
360 views

defend against LOIC Hive Mind attack

Other than client puzzles, what are some things a website can do to defend itself against a LOIC Hive Mind attack? The Low Orbit Ion Cannon (LOIC) is an attack tool which features a user-friendly GUI ...
0
votes
1answer
170 views

Wordpress: Thousand of mail sent to my site from an unknown user! Site is near to be blacklisted by Google

Recently an employee of mine developed a website in WordPress. Things were all fine until we received an email from Google , notifying me that some stuff that can really create security issues is ...
0
votes
3answers
1k views

SSL vs TLS, which is less vulnerable to DOS attacks?

When I learned TLS does not allow a connection to be created until it is has finished a secure handshake, i figured that would make it better for preventing DoS attacks. However, all I seem to find ...
0
votes
2answers
67 views

Requesting webpage as DOS

Is it possible to launch a DOS by repeatedly requesting a webpage (refreshing)? Like holding down F5 on your browser?
0
votes
3answers
120 views

DoS on an ordinary IP [duplicate]

So, I understand DoSing to an HTTP Server. I understand Layer 7 DoS attacks and how to even make these work. But what for an normal IP that isn't HTTP and is connected to the internet. Is the only ...
0
votes
1answer
89 views

To what extend can a DOS attack succeed even if it was detected?

While reading DOS detection and prevention http://staffweb.cms.gre.ac.uk/~lg47/publications/LoukasOke-DoSSurveyComputerJournal.pdf I've asked myself: Even if a firewall detects a DOS attack and begins ...
0
votes
2answers
784 views

How can I stop this attack on my router?

After enabling system log on my Asus DSL-N10E router, I've got this message: DoS: Tcp SYN With Data Attack source=217.74.166.73 What does it mean? Is it a real danger on my network security? And ...
0
votes
1answer
338 views

Preventing DoS in Ajax Calls

We have Ajax call to validate the UserID on create page so that user there only can know if their chosen ID is available or not. We have this URL exposed : https://mydomain.com/validateId?id=<user ...
0
votes
2answers
352 views

Denial Of Service attack in asynchronous communication

Is Low rate DOS attack (unintended) possible through asynchronous communication? Consider this scenario: I have a client server application were there is a WAN communication between the client and ...
0
votes
2answers
102 views

Looking for information about CVE-2006-6876 vulnerability

In order to study vulnerabilities of a SIP server and the impacts of DOS attacks on the QoS of VoIP service, I have found this vulnerability which can be exploited to cause DoS on SIP server. But I ...
0
votes
1answer
90 views

Is there an easy way to know if a regex is “evil”

I was reading this article (about ReDos). The examples they give are pretty simple but I'm sure such regex can hide everywhere. If there is any way to test if a regex is evil without spending a lot of ...
0
votes
1answer
110 views

Organizing results from netstat using find on Windows [closed]

I am trying to figure out a way to natively do this within Windows without having to load any 3rd party applications. When I run: netstat -ba I want to find established connections without losing ...
0
votes
2answers
256 views

OWA + AD Lockout Policy: Quite the Mixture

Many organizations have webmail exposed to the world. These sites are often hooked up to AD for user authentication. Are there any specific security controls OWA (Outlook web app) has that would ...
0
votes
1answer
118 views

Finding the method of attack [closed]

My server has been repeatedly attacked in the last few days. Here's the observations: The ISP server traffic monitor shows the incoming traffic goes up to 300Mbps (with no outgoing traffic), and ...
0
votes
1answer
201 views

Is there a layer 1, 2, 5 and 6 DDoS attack? [closed]

I'm doing some research on DDoS attacks, and I seem to only be finding information on layer 3,4 and 7 attacks. When I saw 3/4 and 7 DDoS attacks, I figured they were the most popular, but there were ...
0
votes
1answer
24 views

Is there some kind of a local DoS against processes?

Is there an attack that somehow floods a target process (e.g. by repeatedly calling a WinAPI function that involves the process) and thereby crashes or temporarily disables it?
0
votes
2answers
105 views

Is this a DDOS attack?

I lost my internet connection for about 15 minutes and I checked my netgear router log and found these 3: [DoS Attack: ACK Scan] from source: 114.77.184.189, port 44822, Tuesday, March 24,2015 ...
0
votes
1answer
142 views

distinguish between bots and legitimate clients [closed]

If an attack (DoS & DDoS) involves thousands of bots, how can the server distinguish them from legitimate clients?
0
votes
1answer
125 views

Identifying attacks by network activity

Is it possible (and how) to tell from a network dump if there is a buffer overflow attack, DoS or brute force attack? A DDoS would be more obvious to identify, but those attacks mentioned above I ...
0
votes
1answer
319 views

what type of attack does LOIC do? [closed]

I have used LOIC (Low Orbit Ion Cannon) earlier . Today i was reading on wikipedia that there are many types of dos attacks , namely SYN attacks , HTTP flooding ,UDP flooding ,etc and two questions ...
0
votes
1answer
273 views

How can I test a DoS attack against snort?

I need to set up an scenario where an attacker DoS attacks port 80 of an server while snort and others users try to connect to port 80 at the same time. Something like this: 1000 connections to port ...
0
votes
2answers
180 views

how to block ip from head or ping or get or post to webserver (using apache and windows)?

am using apache 2.4.9 latest with windows 7 i am using some modules like limitipconn_module security2_module but using wireshark i get unlimited request to busy my webserver (DOS) from some ip ...
0
votes
1answer
224 views

DoS anomaly-based detection: simplest approach beside simple threshold

As I learned, there is this technique in which the number of bytes/packets/frames of aggregated traffic is being checked to see if they deviate from a normal behavior. Then the time slot of that ...
0
votes
1answer
357 views

Differentiate normal flow and broadcast attacks

How do you identify whether a broadcast traffic is normal or is considered an attack such as a DoS attack?, There is some information that the plot or the source that allows me to differentiate ...
0
votes
0answers
11 views

Blocking all remote connections - Cisco LRT214 [migrated]

Recently had a SYN Flood attack on my home office. The attack was stopped by our Cisco LRT214. Most of the configs are manufacturer default. Any way to simply disable all remote connections without ...
0
votes
1answer
379 views

API Key DDOS prevention method

Hi I just wanted some feedback on a DDOS preventing php script that I'm designing. It quite simple and I wanted some feedback on whether you guys think it would be effective. I'm currently using the ...
0
votes
0answers
20 views

Active Directory - Denial-of-Service [duplicate]

How can I prevent a user on the domain from launching a denial-of-service attack against Active Directory by scripting bad password attempts against every user in the domain?
-1
votes
2answers
441 views

DoS and Hacking - Terms and Definitions [closed]

Based on the top rated answer to this question: Is showing your IP address in the URL a bad practice? I'm curious to know if a DoS attack is consider 'hacking' or simply an 'attack.' I think ...
-1
votes
1answer
147 views

Can the attacker launch a sufficiently large SYN flood to overwhelm the victim's server?

Suppose that the victim's web server infrastructure can process 200,000 TCP connection requests per second. Assume that a single connection request (TCP initial SYN) requires 40 bytes to transmit. The ...
-1
votes
4answers
110 views

Is 100% anonymity possible with Tor under certain circumstances? [duplicate]

Tor has guidelines that define a set of rules/techniques to assure anonymity. Some examples are browsing in small window mode so your screen resolution can't be detected, using HTTPS everywhere, and ...
-1
votes
1answer
63 views

Mitigate DDos on Windows box

I would love to know, If you know some way to mitigate DDos/Dos attacks on Windows. In Linux we can Mitigate using the IPTables Almighty, but I wonder If there is something like that in Windows. ...
-1
votes
1answer
139 views

Whose resources does Maltego Footprint L3 exhaust? Mine or target's?

Maltego Footprint L3 says: This perform a level 3 (intense) footprint on a domain. It takes a while and it eats resources. Use with care. Whose resources do they refer to? My resources or the ...
-1
votes
2answers
447 views

Packet size and flood attacks

Do the attackers use small but a lot packets or big and some? e.g. 2 bytes or 512bytes? Also , can packet size affect the size/speed of the attack? Something more , how do the firewalls block dos ...
-1
votes
1answer
353 views

If someone downloaded 600GB , can that be ddos attack [duplicate]

Last night some one exploit some vulnerability in my site and then upload php script in my images folder. I have the Amazon EC2 server with centos. Now the Hacker downloaded 600GB and increased my ...
-2
votes
1answer
71 views

Random scanning or potential attack/recon? [duplicate]

If the purpose of a SYN Flood attack would be to make the target unresponsive to normal traffic, same as any other DoS, wouldn't this attack generally have been directed at a public server rather than ...
-3
votes
1answer
72 views

Recommendations for SMTP DoS [closed]

I have an opened SMTP server that allows me to send emails. The problem is that I can send a massive amount of emails (80,000+) to a specific mailbox and block all the other legitimate emails (that ...