I read some explains or paper about link flooding DDoS attack, which is new relatively.
- "employs legitimate, low-density flows to flood a group of selected links. Therefore, these malicious flows can hardly be distinguished by traditional schemes..." - Towards mitigating Link Flooding Attack via incremental SDN deployment
- "target the core of the Internet that can cause significant damage while remaining undetected..." - SPIFFY: Inducing Cost-Detectability Tradeoffs for Persistent Link-Flooding Attacks
I want to know how link flooding DDoS attack works, for example,
- how employs legitimate traffic? what means attack selected links? how to remain undetected? etc.