Download pptx - Denial of Service Attack History What is a Denial of Service Attack? Modes of Attack Performing a Denial of Service Attack Distributed Denial of Service

Transcript
Page 1: Denial of Service Attack History What is a Denial of Service Attack? Modes of Attack Performing a Denial of Service Attack Distributed Denial of Service

Denial of Service AttacksClayton Sullivan

Page 2: Denial of Service Attack History What is a Denial of Service Attack? Modes of Attack Performing a Denial of Service Attack Distributed Denial of Service

Overview

Denial of Service Attack History What is a Denial of Service Attack? Modes of Attack Performing a Denial of Service Attack Distributed Denial of Service Detection and Prevention

Page 3: Denial of Service Attack History What is a Denial of Service Attack? Modes of Attack Performing a Denial of Service Attack Distributed Denial of Service

History

First major attacks start to appear in 2001.

Major companies have been hit as well as major Governments

Twitter, Facebook, Google, Amazon, Wal-Mart, Pirate Bay, Irish Government, Iranian Government, Georgian Government

Page 4: Denial of Service Attack History What is a Denial of Service Attack? Modes of Attack Performing a Denial of Service Attack Distributed Denial of Service

What is a Denial of Service Attack?

It is an attempt to make a computer resource unavailable to its intended users.

Reasons may vary but it is an effort to prevent an internet site or service from functioning efficiently.

Typical Connection Denial of Service Attack

http://i.i.com.com/cnwk.1d/i/ne/pre/Net/2000/02/synack_normal.gif
http://i.i.com.com/cnwk.1d/i/ne/pre/Net/2000/02/synack_evil.gif
Page 5: Denial of Service Attack History What is a Denial of Service Attack? Modes of Attack Performing a Denial of Service Attack Distributed Denial of Service

Attacks

Basic Attack Types› Consumption of computational resources

Bandwidth, disk space, processor time› Disruption of configuration information

Routing information› Disruption of state information

Resetting of TCP sessions› Disruption of physical network components› Obstructing the communication media

between the intended users and the victim

Page 6: Denial of Service Attack History What is a Denial of Service Attack? Modes of Attack Performing a Denial of Service Attack Distributed Denial of Service

Performing a Denial of Service Attack

An attacker sends several authentication messages to a server at once.

These authentication messages have fake return addresses so the server can not find the user to give authentication approval.

The server then waits to close the connection and when it does the attacker can send a new batch of fake requests.

This process is repeated over and over, tying up the service indefinitely.

Page 7: Denial of Service Attack History What is a Denial of Service Attack? Modes of Attack Performing a Denial of Service Attack Distributed Denial of Service

Performing a Denial of Service Attack

Page 8: Denial of Service Attack History What is a Denial of Service Attack? Modes of Attack Performing a Denial of Service Attack Distributed Denial of Service

Distributed Denial of Service

Page 9: Denial of Service Attack History What is a Denial of Service Attack? Modes of Attack Performing a Denial of Service Attack Distributed Denial of Service

Distributed Denial of Service

In a distributed denial of service attack, the attacker takes over machines on the internet and uses them to perform a denial of service attack.

Used in order to generate the necessary traffic in order to bring down the resource.

Page 10: Denial of Service Attack History What is a Denial of Service Attack? Modes of Attack Performing a Denial of Service Attack Distributed Denial of Service

Prevention and Detection

Denial of service attacks can lead to significant loss of time and resources.

Being able to detect and then prevent denial of service attacks can prevent this loss of time and resources

There are both hardware and software solutions for detection and prevention.

Page 11: Denial of Service Attack History What is a Denial of Service Attack? Modes of Attack Performing a Denial of Service Attack Distributed Denial of Service

Prevention and Detection

A filter can be implemented that sniffs packet info and looks for suspicious patterns and will deny access if one can be found.

Intrusion Prevention Systems Firewalls, Switches, Routers

http://i.i.com.com/cnwk.1d/i/ne/pre/Eco/2000/02/synack_block.gif
Page 12: Denial of Service Attack History What is a Denial of Service Attack? Modes of Attack Performing a Denial of Service Attack Distributed Denial of Service

Conclusion

History Denial of Service Attack Distributed Denial of Service Attack Prevention and Detection

Page 13: Denial of Service Attack History What is a Denial of Service Attack? Modes of Attack Performing a Denial of Service Attack Distributed Denial of Service

Questions?

Page 14: Denial of Service Attack History What is a Denial of Service Attack? Modes of Attack Performing a Denial of Service Attack Distributed Denial of Service

References

www.wikipedia.org www.cisco.com www.cert.org www.us-cert.gov news.cnet.com

http://www.wikipedia.org/
http://www.cisco.com/
http://www.cert.org/
http://www.us-cert.gov/

Recommended

Mitigation of Denial of Service Attack with Hardware
Mitigation of Denial of Service Attack with Hardware Documents
Analysis of a Distributed Denial-of-Service Attack Abstract 1. Introduction
Analysis of a Distributed Denial-of-Service Attack Abstract 1. Introduction Documents
Chapter 7 Denial-of-Service Attacks Denial-0f-Service (DoS) Attack The NIST Computer Security Incident Handling Guide defines a DoS attack as: “an action
Chapter 7 Denial-of-Service Attacks Denial-0f-Service (DoS) Attack The NIST Computer Security Incident Handling Guide defines a DoS attack as: “an action Documents
NEC Cyber Security · Distributed Denial of Service (DDoS) An attack in which a multitude of compromised systems attack a single target, thereby causing denial of service for users
NEC Cyber Security · Distributed Denial of Service (DDoS) An attack in which a multitude of compromised systems attack a single target, thereby causing denial of service for users Documents
Detection of Denial of Service Attack Through Network Traffic Analysisethesis.nitrkl.ac.in/7575/1/2015_BT_DEtection_Varma.pdf ·  · 2016-05-24Detection of Denial of Service Attack
Detection of Denial of Service Attack Through Network Traffic Analysisethesis.nitrkl.ac.in/7575/1/2015_BT_DEtection_Varma.pdf ·  · 2016-05-24Detection of Denial of Service Attack Documents
Denial of Service Attack to UMTS (Radio) Networks Using
Denial of Service Attack to UMTS (Radio) Networks Using Documents
Security Configuration Guide: Denial of Service Attack ... · Security Configuration Guide: Denial of Service Attack Prevention, Cisco IOS Release 15M&T Americas Headquarters Cisco
Security Configuration Guide: Denial of Service Attack ... · Security Configuration Guide: Denial of Service Attack Prevention, Cisco IOS Release 15M&T Americas Headquarters Cisco Documents
Chapter 7 Denial-of-Service Attacks Denial-of-Service (DoS) Attack The NIST Computer Security Incident Handling Guide defines a DoS attack as: “An action
Chapter 7 Denial-of-Service Attacks Denial-of-Service (DoS) Attack The NIST Computer Security Incident Handling Guide defines a DoS attack as: “An action Documents
Chapter 9 Phase 3: Denial-of-Service Attacks. Fig 9.1 Denial-of-Service attack categories
Chapter 9 Phase 3: Denial-of-Service Attacks. Fig 9.1 Denial-of-Service attack categories Documents
A denial of service attack to umts networks using sim less devices
A denial of service attack to umts networks using sim less devices Education
Cloud computing security policy framework for mitigating denial of service attack
Cloud computing security policy framework for mitigating denial of service attack Technology
Scalable Denial of Service Attack Prevention on the Internet › news_and_events › ...Scalable Denial of Service Attack Prevention on the Internet Kihong Park Hyojeong Kim Bhagya
Scalable Denial of Service Attack Prevention on the Internet › news_and_events › ...Scalable Denial of Service Attack Prevention on the Internet Kihong Park Hyojeong Kim Bhagya Documents
A System for Denial of Service Attack ...ijcert.org/ems/ijcert_papers/V3I310.pdf · A System for Denial of Service Attack Detection Based On Multivariate Corelation Analysis 1Sonam
A System for Denial of Service Attack ...ijcert.org/ems/ijcert_papers/V3I310.pdf · A System for Denial of Service Attack Detection Based On Multivariate Corelation Analysis 1Sonam Documents
Taxonomies of Distributed Denial of Service Networks ...rblee/ELE572Papers/Fall04Readings/DDoSSurvey... · A Distributed Denial of Service (DDoS) attack is a coordinated attack on
Taxonomies of Distributed Denial of Service Networks ...rblee/ELE572Papers/Fall04Readings/DDoSSurvey... · A Distributed Denial of Service (DDoS) attack is a coordinated attack on Documents
Wi-Fi Denial of Service Attack on Wired Analog RF … · Wi-Fi Denial of Service Attack on Wired Analog RF ... and a software defined radio called a Universal Software Radio Peripheral
Wi-Fi Denial of Service Attack on Wired Analog RF … · Wi-Fi Denial of Service Attack on Wired Analog RF ... and a software defined radio called a Universal Software Radio Peripheral Documents
Anatomy of Denial of Service Attack and Defense in a Lab … · What is Denial of Service Attack? 23rd Annual Computer Security Application Conference z“Attack in which the primary
Anatomy of Denial of Service Attack and Defense in a Lab … · What is Denial of Service Attack? 23rd Annual Computer Security Application Conference z“Attack in which the primary Documents
Impact of Distributed Denial-of-Service Attack on Advanced ...shura.shu.ac.uk/11134/1/Pranggono Impact of DDoS attack on AMI.pdf · 2.3 Denial-of-Service (DoS) Attack In this article
Impact of Distributed Denial-of-Service Attack on Advanced ...shura.shu.ac.uk/11134/1/Pranggono Impact of DDoS attack on AMI.pdf · 2.3 Denial-of-Service (DoS) Attack In this article Documents
Denial-of-Service Attacks Justin Steele Definition “A "denial-of-service" attack is characterized by an explicit attempt by attackers to prevent legitimate
Denial-of-Service Attacks Justin Steele Definition “A "denial-of-service" attack is characterized by an explicit attempt by attackers to prevent legitimate Documents