3 ms·
How is such a large attack even possible? Genuinely curious.
by sidcool 6y ago
How is such a large attack even possible? Genuinely curious.
- close04 6y agoIn short in many cases an amplification attack is used where you send a small quantity of traffic from a spoofed address (the victim's) to a server that will reply to the victim with up to several hundreds of times (even 50000) more data [0]. [0] https://en.wikipedia.org/wiki/Denial-of-service_attack#Amplification https://en.wikipedia.org/wiki/Denial-of-service_attack#Ampli... More detailed descriptions: https://www.cloudflare.com/learning/ddos/memcached-ddos-attack/ https://www.cloudflare.com/learning/ddos/memcached-ddos-atta... https://www.cloudflare.com/learning/ddos/ntp-amplification-ddos-attack/ https://www.cloudflare.com/learning/ddos/ntp-amplification-d... https://www.cloudflare.com/learning/ddos/dns-amplification-ddos-attack/ https://www.cloudflare.com/learning/ddos/dns-amplification-d...
- solotronics 6y agosend out packets with fake source IP. the fake source IP is your attack target. servers / services respond with a larger packet back to the attack target. Its called DDoS amplification. you can prevent this on networks you own by implementing Unicast RPF https://en.wikipedia.org/wiki/Reverse-path_forwarding#Unicast_RPF https://en.wikipedia.org/wiki/Reverse-path_forwarding#Unicas...
- deleted 6y ago[deleted]