Vince Pillay, CISO at Domestic and General - DDOS Attacks! – A major threat facing organisations today
•
1 recomendación•566 vistas
Vince Pillay, CISO at Domestic and General spoke at the CIO Event April 2014
Recomendados
Recomendados
Más contenido relacionado
Más de Global Business Events
Más de Global Business Events (20)
Último
Último (20)
Vince Pillay, CISO at Domestic and General - DDOS Attacks! – A major threat facing organisations today
- 1. DDOS Attacks ! A Major threat facing organisations today. Domestic & General Vince Pillay
- 2. The techniques used in the past by many mitigation providers are no longer able to cope!
- 3. • Impossible to stop the attack simply by blocking a single IP address • Difficult to distinguish legitimate user traffic from attack traffic • The cost of an attack can be considerable • Website offline potentially for days • Many organisations do not know they are under a DoS/DDoS attack when it begins
- 4. Practically anyone with an Internet connection can launch their own attack. Attackers can rent botnets or purchase relatively cheap tools to launch their attack.
- 5. Your ISP will most likely offer DDoS mitigation but if your traffic grows too large and starts affecting their other customers, or if the attack is too complicated, they may just turn you off.
- 6. • Ping of Death • Mailbomb • Smurf Attack • Teardrop
- 7. The list of DDoS attack victims includes some pretty major names
- 8. Do you feel confident that what you have in place can successfully mitigate an attack?
Notas del editor
- focused on two distinct approaches: thwart the attacks at the provider level or stop them at the customer level. focused on two distinct approaches: thwart the attacks at the provider level or stop them at the customer level. Both approaches have failed to achieve uniform success on a consistent basis, and both are quite costly.
- Ping of Death - bots create huge electronic packets and sends them on to victimsMailbomb - bots send a massive amount of e-mail, crashing e-mail serversSmurf Attack - bots send Internet Control Message Protocol (ICMP) messages to reflectors, see above illustrationTeardrop - bots send pieces of an illegitimate packet; the victim system tries to recombine the pieces into a packet and crashes as a result
- . Microsoft suffered an attack from a DDoS called MyDoom. Crackers have targeted other major Internet players like Amazon, CNN, Yahoo and eBay.
- Assurance