New answers tagged

1

Amplification attacks leverage the asymmetric nature of small amounts of data sent to servers producing a large amount of response towards a target. These are usually performed over protocols for which the source address is easily spoofed. This is not a strict requirement and certainly this could occur on a wide variety of protocols or services but the ...


1

After having a client's site go down because of this exact problem, we introduced a somewhat simplistic solution that helped dramatically minimise the effect of such attacks. As phyrfox said in his answer, a FULLTEXT index is a very effective tool for both performance and counter DoS. As we were already tracking visitors for statistic information, we went ...


2

You can mitigate both of these issues by creating a FULLTEXT index. In other words, instead of having the database system read the entire table and scan every character in every field, the system builds an index that can be quickly searched while discarding common words/letters. Your attacker can search for "e" as fast as they want, and the index will answer ...


0

There are a few things that come into mind with regards to DoS via what you described. The first is network based, the second is query based (what is the maximum cut off). The first network based: This will depend on the design or your network. E.g., is there load balancing configured somewhere, do you have multiple providers, do you have filtering in place, ...



Top 50 recent answers are included