Comments on: Ding Dong…DDoS is dead! http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/ Commentary on the State of Information Security Sun, 10 Jan 2010 16:13:08 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: Don http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/comment-page-1/#comment-4013 Don Fri, 08 Dec 2006 04:00:28 +0000 http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/#comment-4013 Oh and my favorite CISCO You may find better, But you will never pay more ! Oh and my favorite

CISCO
You may find better,
But you will never pay more !

]]> By: Misha http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/comment-page-1/#comment-3942 Misha Thu, 07 Dec 2006 04:23:21 +0000 http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/#comment-3942 DNS amplification attacks, like the one that took down BlueSecurity, make me wake up at night in cold sweat. There is simply no technology that can protect you from 6-10gbps of valid DNS traffic hitting your servers. Even companies that specialize in DDoS protection, like Prolexic Technologies, cannot withstand that DNS traffic of that volume. http://www.securiteam.com/securityreviews/5GP0L00I0W.html When I did a talk about evolution of threats at the HostingCon this year, I asked a room full of very bright network operators if they have any viable solutions to DNS amplication DDoS attacks. Not one hand went up. We did come up with an interesting architecture for this at Alert Logic (unimplemented at this time). Unfortunately it's a scheme that relies on a certain element of obscurity to be successful, so we won't be writing any papers about it, as much as we would like to share it. In any case, we are far from being done with DDoS. Misha DNS amplification attacks, like the one that took down BlueSecurity, make me wake up at night in cold sweat. There is simply no technology that can protect you from 6-10gbps of valid DNS traffic hitting your servers. Even companies that specialize in DDoS protection, like Prolexic Technologies, cannot withstand that DNS traffic of that volume.

http://www.securiteam.com/securityreviews/5GP0L00I0W.html

When I did a talk about evolution of threats at the HostingCon this year, I asked a room full of very bright network operators if they have any viable solutions to DNS amplication DDoS attacks. Not one hand went up.

We did come up with an interesting architecture for this at Alert Logic (unimplemented at this time). Unfortunately it’s a scheme that relies on a certain element of obscurity to be successful, so we won’t be writing any papers about it, as much as we would like to share it.

In any case, we are far from being done with DDoS.

Misha

]]> By: Don http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/comment-page-1/#comment-3941 Don Thu, 07 Dec 2006 04:00:07 +0000 http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/#comment-3941 We have seen this kind of thing for a long time.. BLUE Suits ( IBM or nothing, Why did he need that THINK plaque behind him, to get him to "THINK") Bell Shaped Heads ( bell telephone , ONLY "MA BELL" can do it right) Microsoft ( since its attacked more than any other os it will be secure ) yea RIGHT , sure BILL, looser , rich Looser ;-) I see this a " If all you have is a hammer , everything looks like a nail " BLINDERS on MOUTH flapping ;-) La la la We have seen this kind of thing for a long time..

BLUE Suits ( IBM or nothing, Why did he need that THINK plaque behind him, to get him to “THINK”)
Bell Shaped Heads ( bell telephone , ONLY “MA BELL” can do it right)
Microsoft ( since its attacked more than any other os it will be secure ) yea RIGHT , sure BILL, looser , rich Looser ;-)

I see this a ” If all you have is a hammer , everything looks like a nail ”

BLINDERS on MOUTH flapping ;-) La la la

]]> By: LonerVamp http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/comment-page-1/#comment-3898 LonerVamp Wed, 06 Dec 2006 19:27:55 +0000 http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/#comment-3898 As long as there are botnets, DDoS is still one of those things that is most scary on the Internet. Not because I might be a target, but because me or things I rely on may end up as collateral damage. As long as there are botnets, DDoS is still one of those things that is most scary on the Internet. Not because I might be a target, but because me or things I rely on may end up as collateral damage.

]]> By: SamVR http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/comment-page-1/#comment-3892 SamVR Wed, 06 Dec 2006 16:52:32 +0000 http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/#comment-3892 WOW! Great post - put up yer dukes! ;-) WOW! Great post – put up yer dukes! ;-)

]]> By: Security Incite: Analysis on Information Security http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/comment-page-1/#comment-3889 Security Incite: Analysis on Information Security Wed, 06 Dec 2006 15:41:21 +0000 http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/#comment-3889 <strong>The Daily Incite - December 6, 2006...</strong> December 6, 2006 - #167 Good Morning: I'm not a huge fan of science fiction books, as my preference tends to be spy novels. But as I finished a Clive Cussler novel last night, where one of the subjects basically invented a teleporter. The ide... The Daily Incite – December 6, 2006…

December 6, 2006 – #167 Good Morning: I'm not a huge fan of science fiction books, as my preference tends to be spy novels. But as I finished a Clive Cussler novel last night, where one of the subjects basically invented a teleporter. The ide…

]]> By: Mitchell Ashley http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/comment-page-1/#comment-3870 Mitchell Ashley Wed, 06 Dec 2006 08:29:36 +0000 http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/#comment-3870 Great visual graphic ! :) - Mitchell Great visual graphic ! :)

- Mitchell

]]> By: Christian http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/comment-page-1/#comment-3858 Christian Wed, 06 Dec 2006 04:01:15 +0000 http://infosecplace.com/blog/2006/12/05/ding-dongddos-is-dead/#comment-3858 where are on earth to these people come up with these things?? i witness and monitor ddos attacks entering our backbone frequently..ddos is surely not dead..and i don't think it will be anytime soon, unless kids stop compromising machines and compiling botnets...which isn't happening...soon..ever..who knows.. and with the price of GREAT anomaly detection and mitigation devices like arbor's peakflow sp..not every network can afford these luxuries..ddos is far from dead where are on earth to these people come up with these things??

i witness and monitor ddos attacks entering our backbone frequently..ddos is surely not dead..and i don’t think it will be anytime soon, unless kids stop compromising machines and compiling botnets…which isn’t happening…soon..ever..who knows..

and with the price of GREAT anomaly detection and mitigation devices like arbor’s peakflow sp..not every network can afford these luxuries..ddos is far from dead

]]>