Tag Info

New answers tagged

3

As Lawri points out, for the most part the site being DDoSed is not your problem. It's up to the hosting provider to take the steps necessary to mitigate (not stop; there aren't really any ways to completely stop one) a DDoS attack. Note the qualifier: "for the most part". There is one responsibility you do have, at last as a professional designer, and ...


43

The following is all hypothetical: First off you should NEVER sign a SLA in this case, or guarantee any uptime whatsoever. (you are delivering a website, not the service to host that) Secondly, a hosting company should be used who can defend against a DoS attack in some way. (be aware of SLA's and their limitations) You need to think of yourself in the ...


0

If you are not running any kind of server, your computer and router firewall will reject incoming connections, but this does NOT protect you against a denial of service attack. The reason for this is that by the time the packet reaches your router and your router blocks it, it's already too late - the packet has already essentially reached you and has ...


3

DDoS is devastating because it can use perfectly valid traffic, thereby bypassing defences looking for anomalies. It does it's damage due to the volume alone. There are DDoS attacks that can take advantage of vulnerabilities, and their packets do have unique characteristics to look for, but that will depend on the vulnerability being exploited, so we cannot ...


1

No single measure can effectively prevent DDoS attacks. You can, however, reroute traffic or reconfigure the network infrastructure (both logical and physical, which might cause a bit of an overhead, but still, availability is key) in attempt to still deliver your content and reduce the incoming DDoS traffic. The reason why DDoS is such a lingering threat ...


13

No, generally not, although of course they say they can. DDoS is about volume UTM is almost always at the local end of Internet access Therefore, DDoS can usually fill the Internet pipe before even reaching a UTM device. The reasoning - By definition a DDoS - being Distributed - is taking advantage of multiple attack points to generate a level of ...


1

Actually, the question is about can or cannot, not about how or how much, and therefore IDS and UTM systems claims some level of DDoS defense. Not complete defense, because in theory there is no complete defense against DDoS attack. Almost every modern firewall and intrusion protection system (IPS) claims some level of DDoS defense. Some Unified Threat ...


1

...when I saw 3/4 and 7 DDoS attacks, I figured they were the most popular, but there were also layers 1,2,5 and 6 layers as well. The OSI model does not have much common with reality anymore, at least not with layers 5..7. Instead you will find layer 4 functionality packed into layer 7 (like with Websockets) or layer 5 (session) functionality within ...



Top 50 recent answers are included