White Papers

An Analysis of Using Reflectors for Distributed Denial-of-Service Attacks

Category: Security

Tags: spoofing

Overview Attackers can render distributed denial-of-service attacks more difficult to defend against by bouncing their flooding traffic off of reflectors; that is, by spoofing requests from the victim to a large set of Internet servers that will in turn send their combined replies to the victim. The resulting dilution of locality in the flooding stream complicates the victim's abilities both to isolate the attack traffic in order to block it, and to use traceback techniques for locating the source of streams of packets with spoofed source addresses, such as ITRACE [Be00a], probabilistic packet marking and SPIE [S+01].

Download White Paper

By downloading you agree to our Terms and Conditions. These include information regarding use of your personal data.

Publisher
ICIR (The ICSI Center for Internet Research)
File Format
PDF
Date Published
Oct 14, 2008
Format
White Papers
Topics
Denial of Service, Network Security

Similiar White Papers

Defending Against TCP SYN Flooding Attacks Under Different Types of IP Spoofing

Defending Against TCP SYN Flooding Attacks Under Different Types of IP Spoofing

TCP-based flooding attacks are a common form of Distributed Denial-of-Service (DDoS) attacks which abuse network resourc

Publisher: Wuhan University  |  Tags: data, ddos, ip, network, spoofing

Denial of Service and Distributed Denial of Service Protection

Denial of Service and Distributed Denial of Service Protection

To obtain full protection for DoS attacks, organizations typically need to purchase multiple proxy servers, network secu

Publisher: 3Com  |  Tags: ddos, ips, network, network security, software, updates

X-Force®Threat Insight Quarterly Voice over Internet Protocol (VoIP) ? Find out what the threats and challenges are for anyone deploying VoIP

X-Force®Threat Insight Quarterly Voice over Internet Protocol (VoIP) ? Find out what the threats and challenges are for anyone deploying VoIP

The X-Force Threat Insight Quarterly (Threat IQ) highlights the most significant threats and challenges facing security

Publisher: Internet Security Systems  |  Tags: homeland security, security flaws, voip

An independent report by ICSA Labs on the performance of ISS' VoIP-enabled Intrusion Prevention devices

An independent report by ICSA Labs on the performance of ISS' VoIP-enabled Intrusion Prevention devices

This technical product evaluation is focused on the ISS VoIP-enabled Intrusion Prevention devices. These are built to su

Publisher: Internet Security Systems  |  Tags: voip

Secure Health Monitoring Network Against Denial-of-Service Attacks Using Cognitive Intelligence

Secure Health Monitoring Network Against Denial-of-Service Attacks Using Cognitive Intelligence

Secure and energy efficient transmission is a main concern in many wireless sensor network applications. In this paper,

Publisher: Syracuse University  |  Tags: applications, network