补救DDoS攻击的方法

ID：25515

大小：0.21 MB

页数：7页

时间：2022-12-01

金币：15

上传者：战必胜

 

Towards Remediating DDoS Attacks

ArtursLavrenovs

NATOCCDCOE,Tallinn,Estonia

Arturs.Lavrenovs@ccdcoe.org

DOI:10.34190/IWS.21.046



Abstract:TheInternetinfrastructurehasbeenstrugglingwithdistributeddenialofservice(DDoS)attacksformorethantwo

decades.Thispaper reviewsaspects of current remediationstrategiesfor reflectedamplifiedDDoS attacks and identifies

elementsthatareinsufficientlyresearchedwhichmightbehinderingremediationefforts.Itidentifiesadditionalactorswho

shouldbe playingaroleintheseeffortsandreviewstheirincentivesandmotivation.Theissuehaslongb eenwhetheritis

possibletoremediateabusedprotoc olsfasterthan theprotocolsgetdeprecatedwhiledevicesusingthemremainfunctional

untiltheendoftheirlife.Itnowappearsthatitis.TheMemcacheprotocolattackcapacitywasonly319MbpsinMay2020

butitwas1.7Tbpsonlytwoyearspreviously.Thusitcanbeconsideredfullyremediated.Thepaperexamineswhythiswas

asuccessfulremediationeffortandwhetheritcouldbeappliedtoothercommonlyabusedprotocolsbyusingthereflector

capacity measurement methodology. In contrast, the longterm abused DNS protocol has not seen a significant drop in

capacity,whichislingeringaround27.5Tbps.



Keywords:DDoSattacks,DDoSattackcapacity,DDoSattackremediation,reflectors,amplifiers

1. Introduction

ThefirstDDoSnetworkattackwastwodecadesagoandwassoonfollowedbyreflectedamplifiedDDoSattacks

that have been plaguing th e In ternet ever since. Although the number of reflectors observed by scanning

projects has been steadily decreasing, the attack capacity is evergrowing and is setting new records. A

reasonableobserverwouldassumethatourtechnologicalsocietyiscapableofsolvingthislongknowntechnical

challenge,andperh apswonderwhywehavenot.



ThispaperdiscussesonlyreflectedamplifiedDDoSattacksandwhiletheattackers’ desiredeffectforthevictims

is the same and may be common across different types of attack, the remediation strategies differ widely.

Compromised devices participating in a botnet and causing direct attacks attract more attention from law

enforcementagencies,Internetserviceproviders(ISP),andindustry.



ThetwofoldproblemoftheabilitytospoofsourceIPaddressesinthenetworkandalargenumberofreflectors

istherootcauseoftheissue.Anattackercapableofrentingorcompromisingahostconnectedtoamismanaged

networkcanusetheavailableuploadbandwidthbysendingpacketswiththespoofed IPaddressofthevictim

topubliclyreachablenetworkservices,whichinreturnresponddirectlytothevictimusuallywithalargerp acket

size.Thecurrentremediationstrategyistheproliferation ofnetworkconfiguration,ensuringthat on lypackets

withlegitimatesourceIPaddressesenterth eInternetfromindividualnetworks(BC P38,BCP84)andremoving

reflectors. Both thepercentage of networksthat are spoofableand the number ofreflectorsper commonly

abused protocol s havedecreased, which indicates that theremediation strategy is working, at least to some

extent,whiletheDDoSattacksarebreakingcapacityrecords.



Addressing the DDoS problem in 2020 has become more important than ever. The global pandemic almost

instantlyshiftedthewholeeducationsystemandjobsthatcanbedoneonlinetothehome.Accessingdifferent

remotesystemshasbecomeanecessityforallthoseaffected.DDoSattacksagainstman yorganisationscould

previously have had only a limited negative effect and reputational damage and the daily operations of

employeesandstudentscouldcontinueinpersonorvialocallyaccessiblesystems.Nowtheattackcanstopall

workandeducationforremoteusersrelyingonthe targetedsystem.Thishasbecomeareality;DDoSattacks

againstanelearningplatfor mbyasinglehigh schoolstudentdisruptedaccesstoonlineclassesforaweekfor

170,000users(Freed,2020).Whatcou ldbetheworldwideeconomical impactifanewrecordbreakingDDoS

attacktargetsthelargestonlinecollaborationtools?

2. Relatedwork

DDoSis a widely researched topic.It primarily follows atypicalpatternof newtechnology emerging, such as

SDN,blockchain,AI,andresearch ersapplyingittotheDDoSproblembutusually whentheattackhasalready

reachedthevictim.Therootcauseof theissueistwofold:theabilitytospoofthesourceIPaddressesandalarge

152

资源描述：

当前文档最多预览五页，下载文档查看全文

侵权申诉



1 1 2 3 4 5 / 7



此文档下载收益归作者所有

当前文档最多预览五页，下载文档查看全文

版权提示

温馨提示：
1. 部分包含数学公式或PPT动画的文件，查看预览时可能会显示错乱或异常，文件下载后无此问题，请放心下载。
2. 本文档由用户上传，版权归属用户，天天文库负责整理代发布。如果您对本文档版权有争议请及时联系客服。
3. 下载前请仔细阅读文档内容，确认文档内容符合您的需求后进行下载，若出现内容与标题不符可向本站投诉处理。
4. 下载文档时可能由于网络波动等原因无法下载或下载错误，付费完成后未能成功下载的用户请联系客服处理。

大家都在看

近期热门

补救DDoS攻击的方法

最近更新

大家都在看

相关文章

相关标签