Tag Info

New answers tagged

0

I've been searching, and I found that to resist distributed denial of service (DDoS) attacks a set of techniques are used on networks attached to the Internet, to protect the target and relay networks. This is done by passing network traffic addressed to the attacked network through high-capacity networks with "traffic scrubbing" filters. DDoS mitigation ...


0

Most distributed denial-of-service (DDOS) attacks are simple "throw data at the server faster than its connection can handle" attacks, and consequently cannot be dealt with at the application level. Rather, they're mitigated at the ISP level, typically by blocking the attacking computers. Non-distributed attacks, on the other hand, can be mitigated at the ...


7

One usually evoked solution is Fail2Ban: this is a system which uses the firewall rules (iptables) to block incoming connections from IP addresses from which some kind of exhaustive search attack is apparently in progress. This, of course, won't work with a distributed DoS, coming from thousands of distinct IP addresses. In general, very few things resist a ...


1

Sounds a lot like SYN Cookies. This is a method to prevent TCP SYN DoS attacks. Basically, when the server receives a TCP SYN packet, it creates a "cookie" with a hash of the values (specifically the source and sequence number), and then sends the ACK but does not create a "half open" connection. When the server receives a SYNC ACK, it uses the ...


0

I'm not convinced of the advantages of such a system but with regards to implementing it: You want a proxy application listening on the mentioned port so when requests for your web application come in, they go to the proxy first. The proxy analyses the request and employs your pattern matching logic. The proxy then forwards the request to the webapp (or ...



Top 50 recent answers are included