~/talk

Anatomy of a DDoS

Talkat Dutch PHP Conference 2019 · 2019-06-06..06-08· [security, networking]
slides:none on file

Explains how real DDoS vectors work and which defenses actually stop them: memcached amplification 3 TB/s and Mirai 1.1 TB/s are given as concrete examples, attackers use botnets of compromised IoT devices, and typical attacks hit layers 3/4/7. Recommends hiding origin IPs, adding a CDN/WAF that can absorb traffic (Cloudflare, Akamai, Capsula), enable aggressive page caching, use iptables/fail2ban or JS challenges for bots, and migrate content under attack; cites costs: ~6–24 hours, ~$40k/hour, enterprise median ~$2M.

AI-written summary · about

  1. 0:00Start
  2. 1:50What is a DDoS?
  3. 3:41Modern DDoS examples
  4. 8:35Cost of a DDoS
  5. 10:47What is a Botnet?
  6. 11:05Structure of a botnet
  7. 15:11Landscape Internet of Things
  8. 18:59Physical Layer
  9. 19:202 - Data Link Layer
  10. 19:41Network Layer
  11. 20:08Transport Layer
  12. 20:45Session Layer
  13. 21:13Presentation
  14. 21:44Application
  15. 22:09DDoS and the OSI model
  16. 25:49DDoS Protection Services
  17. 30:22Legislation against DDoS
  18. 31:08Legal Timeline
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.