Warding against the Dark Arts: Crafting a Defense Strategy against Botnet DDoS
summary
Large-scale DDoS volume rises ~95 percent and monthly traffic from ~100 to ~330 exabytes so the team builds a layered defense: hardened logs and metrics, an origin-side blocker to avoid a 5x latency spike, and a simple rule engine that auto-deploys blocking rules from near‑real‑time logs with local default rules when dependencies fail. Automated tactics include automatic detection of anomalous dimensions, graceful degradation (drop low‑value widgets, cut results 12→6), and a 0–10 client reputation header to de‑prioritize requests.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 1:22Agenda
- 1:59Are DDoS getting worse
- 4:29Service hardening
- 8:01Customer comments
- 8:34Survey question
- 9:17Capacity test
- 11:56Organic increase
- 18:56Risky Part
- 23:21Analysis
- 29:20Degraded State
- 30:51Blocking Requests
- 32:17Automation
- 34:29Default Rules
- 37:07Recap
- 37:42Graceful Degradation
- 39:25Client Reputation
- 40:43Summary
related talks
45mAnatomy of a DDoS
40mThe new reality of DDOS
37mAnatomy of a DDoS
01h 00mIoT Lockdown - Battling Bot Net Builders
45mBarbarians at the Gate(way)
25mHow to Pull Off a Near Undetectable DDoS Attack...
52mNot all attacks are malicious: DDoS from outside and within
41mAre DDoS attacks a threat to the decentralised internet?