TG
T.M.J. Guldenmundt
info
Please Note
<p>This page displays the records of the person named above and is not linked to a unique person identifier. This record may need to be merged to a profile.</p>
1 records found
1
Monitoring and Analyzing SSDP DDoS Amplification Attacks
An Empirical Study of Reflective Amplification Traffic Using Honeypots
Distributed Denial-of-Service amplification attacks are a growing threat to modern-day network infrastructure, with the Simple Service Discovery Protocol (SSDP) being one of the most abused protocols for these attacks. This paper revisits the SSDP amplification attacking landscape by designing, implementing and deploying a honeypot system, to capture real-world attack traffic.
The collected data is analyzed to study how adversaries select their amplifiers, what techniques they use and what countries and industry sectors are most often targeted in these attacks.
The results show a clear preference for high amplification reflectors, an increase in the usage of subnet-wide “carpet bombing” strategies, and a concentration of attacks on ISP and hosting infrastructures.
Altogether this research presents an updated overview of the modern-day SSDP DDoS amplification attack landscape. ...
The collected data is analyzed to study how adversaries select their amplifiers, what techniques they use and what countries and industry sectors are most often targeted in these attacks.
The results show a clear preference for high amplification reflectors, an increase in the usage of subnet-wide “carpet bombing” strategies, and a concentration of attacks on ISP and hosting infrastructures.
Altogether this research presents an updated overview of the modern-day SSDP DDoS amplification attack landscape. ...
Distributed Denial-of-Service amplification attacks are a growing threat to modern-day network infrastructure, with the Simple Service Discovery Protocol (SSDP) being one of the most abused protocols for these attacks. This paper revisits the SSDP amplification attacking landscape by designing, implementing and deploying a honeypot system, to capture real-world attack traffic.
The collected data is analyzed to study how adversaries select their amplifiers, what techniques they use and what countries and industry sectors are most often targeted in these attacks.
The results show a clear preference for high amplification reflectors, an increase in the usage of subnet-wide “carpet bombing” strategies, and a concentration of attacks on ISP and hosting infrastructures.
Altogether this research presents an updated overview of the modern-day SSDP DDoS amplification attack landscape.
The collected data is analyzed to study how adversaries select their amplifiers, what techniques they use and what countries and industry sectors are most often targeted in these attacks.
The results show a clear preference for high amplification reflectors, an increase in the usage of subnet-wide “carpet bombing” strategies, and a concentration of attacks on ISP and hosting infrastructures.
Altogether this research presents an updated overview of the modern-day SSDP DDoS amplification attack landscape.