DDoS Protection at Global Scale — Real Cases and Lessons Learned
summary
Examines tools and best practices for global DDoS protection using AWS technologies: AWS Shield, AWS WAF, automated traffic filtering, botnet/proxy detection, and honeypots. Reviews architectures for Layer-7 defense, presents statistics and case studies including the February 2022 DDoS attack on Ukrainian infrastructure and a large Ukrainian company’s mitigation and AWS-driven improvements.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 0:49DDoS threat research - How AWS analyzes traffic at a global scale
- 3:07DDoS attack statistics over the past years
- 4:07Tools and infrastructure for L7 DDoS attacks
- 4:30How AWS tracks and combats botnets and proxy networks
- 6:04AWS WAF for using a botnet list
- 7:30Automated traffic filtering during DDoS attacks with AWS Shield
- 8:31Honeypot technique for tracking DDoS participants
- 12:20Case study: takedown of the C2 botnet
- 16:25Attack types and 2024 statistics
- 23:27Typical DDoS protection architectures in AWS
- 26:41Attack on Ukrainian resources in February 2022
- 29:06Case study: history of fighting DDoS for a large Ukrainian company
- 33:00AWS WAF - traffic filtering tool
- 35:06Benefits of using AWS Shield Advanced
- 36:34Attack statistics
- 37:57Q&A
related talks
22mNavigating a cybersecurity event in real time
42mProtect your workloads from DDoS attacks with Shield Advanced
33mNetwork and application protection on AWS
35mComprehensive protection for Infrastructure and Web Apps
51mProtect your internet-facing web applications hosted on AWS
11mAWS On Air ft. Automatic Application Layer DDoS
53mHow AWS threat intelligence becomes managed firewall rules
45mAnatomy of a DDoS