Barbarians at the Gate(way)
summary
Shows concrete attack telemetry and fixes: Akamai sees petabytes of traffic and ~2 TB of attack traffic flowing constantly, top web vectors are SQL injection, LFI, XSS and are avoidable with input/output sanitization; scan tool masscan — whole Internet in ~4 hours enables attackers; big incidents include memcached 1.3 TB attack, Mirai/Satori/IOT botnets, Spike ~517 Gbps and an Android botnet of ~700k devices; patch NTP, change default IoT creds, and add MFA.
AI-written summary · about
chapters (19)
- 0:00Start
- 8:10Actors: For Hire
- 11:07ARCH VILLAINS
- 13:41Types of Attacks
- 13:55Attacks: Volumetric
- 14:32Your website can be overwhelmed...
- 19:29Attacks: Extortion
- 22:57Attacks: Amplification VOLUME I VOLUME I
- 25:17Tools: Donut (con't)
- 26:49Tools: Brobot
- 27:25Tools: WGET
- 28:33Tools: Mirai
- 30:49Trends
- 31:12Commoditization of DDoS
- 32:32What's a Booter?
- 35:03Other Observations
- 35:25Why this is a problem.
- 36:54So, what to do?
- 37:55AKAMAI IS HIRING!
related talks
45mBarbarians at the Gate(way)
37mAnatomy of a DDoS
03mThe world will see (and just saw) an Internet zombie apocalypse
45mAnatomy of a DDoS
24mSecurity in 2023 and Beyond: Automation, Analytics and Architecture
46mAttacks, Lies and the Underground World
01h 00mHack to the Future
26mLooking at 4 years of web honeypot attacks: tactics, ...