Anatomy of a DDoS
summary
Shows how attackers build botnets, how DDoS tools and mitigations actually behave, and what law enforcement achieved: memcached reflection hits 1.3 TB/s memcached and is absorbed by a mitigation provider in ~10 minutes; Mirai variants reached 1.1 TB/s and 2018 saw a 1.7 TB/s peak 2018. Kaspersky numbers put SMB losses at $120k and enterprises at $2M, with ~50% of attacks lasting 6–24 hours. Demonstrates IP Viking visualization, CDNs (Akamai/Cloudflare) soaking traffic, and takedowns like Operation Power Off/webstresser.
AI-written summary · about
chapters (20)
- 0:00Intro
- 3:1013TB/s: Github Memcached Servers (2018)
- 4:04Android-based WireX attacks (2017)
- 4:411.1TB/s Mirai botnet attacks (2016)
- 5:40Level 3/DynDNS attacks (2016)
- 8:41Cost of a DDoS
- 11:12Structure of a botnet
- 12:40Landscape Internet of Things
- 17:48Rua bot?
- 19:34Physical Layer
- 19:44Data Link Layer
- 19:59Network Layer
- 20:22Transport Layer
- 20:47Session Layer
- 20:59Presentation
- 21:20Application
- 21:49DDoS and the OSI model
- 25:46DDoS Protection Services
- 29:07Legislation against
- 30:22Legal Timeline
related talks
45mAnatomy of a DDoS
52mInvestigating DDOS - Architecture Actors and Attribution
45mBarbarians at the Gate(way)
03mThe world will see (and just saw) an Internet zombie apocalypse
13mDDoS emotions
47mThe Secret Life of Enterprise Botnets
49mDDoS attacks: tectonic changes in 2016–2017
40mThe new reality of DDOS