Report from the Field: A CDN's Role in Repelling Attacks against Banking...
summary
Covers attacks targeting content delivery networks and their customers—specifically large-scale DDoS, web site defacement, and click fraud—using real campaign examples. Describes mitigation strategies and evaluates how Akamai's CDN has protected banking-industry web sites against these threats.
AI-written summary · about
chapters (24)
- 0:00Start
- 6:45DDoS attacks from 01 2014 to Q1 2016
- 12:13DDOS Attack Frequency by industry
- 13:30DDOS Attack Frecuency by industry
- 13:41Top 10 Source Countries for DOS Attacks in Q1 2016
- 21:26Defeating HTTP flooding attacks - Rate Controls
- 21:44Web Application Attacks
- 22:35Quick Note on the Web Application Attack Data Corpus
- 22:57Top Web Application Attack Vectors
- 23:38MOST TARGETED INDUSTRIES
- 24:06Examples of Attacks Subbed by Akamai
- 26:16Example SQL injection
- 28:36Cross-She Scripting XSS
- 30:18XSS: Basic Cookie Steing
- 30:28CacheBusting
- 34:13Bot-Based Account Takeover: Obtain Password Dump
- 34:51Leverage Compromised Home Cable Modems/Routers
- 35:09Account Takeover Campaign Attack Architecture
- 37:29Operation Abab
- 40:41Attack - Sept 2012
- 44:34Phase 2 Attacks - January 20 2019
- 48:45Attack Example
- 51:01Attack Tactics - Pre-attack Reconnaissance
- 53:42Observations
related talks
52mNot all attacks are malicious: DDoS from outside and within
45mAnatomy of a DDoS
20mEnd-Users Get Maneuvered: Empirical Analysis of Redirection Hijacking in Content Delivery Networks
43mHow Cloudflare helps survive the largest attacks on the Internet
52mDDoS Protection at Global Scale — Real Cases and Lessons Learned
42mBypassing Anti-DDoS at Telecom Operators
37mAnatomy of a DDoS
40mThe new reality of DDOS