Denial-of-service attack DoS DDoS Detection and Prevention

What is DoS (Denial-of-Service attack) or DDoS (Distributed Denial-of-Service attack)? And How we Detect and Prevent it?

Denial-of-Service attack DoS, or Distributed Denial-of-Service attack DDoS is an attempt to make a computer resource unavailable to its intended users. Although the means to, motives for, and targets of a DoS attack may vary, it generally consists of the concerted, malevolent efforts of a person or persons to prevent an Internet site or service from functioning efficiently or at all, temporarily or indefinitely.

One common method of attack involves saturating the target (victim) machine with external communications requests, such that it cannot respond to legitimate traffic, or responds so slowly as to be rendered effectively unavailable. In general terms, DoS attacks are implemented by:

=> Forcing the targeted computer(s) to reset, or consume its all resources so that it can no longer provide its service;

=> Obstructing the communication media between the intended users and the victim so that they can no longer communicate adequately.

The CERT (Computer Emergency Readiness Team) defines symptoms of DoS or DDoS attacks to include:

+ Unusually slow network performance
+ Unavailability of a particular web site
+ Inability to access any web site(s)
+ Dramatic increase in the number of spam emails received (Mail Bomb )

There is Many Kinds of DoS or DDoS Attack Characterized By Methods, Includes:

+ Flooding a network, thereby preventing legitimate network traffic;
+ Disrupting a server by sending more requests than it can possibly handle, thereby preventing access to a service;
+ Preventing a particular individual from accessing a service;
+ Disrupting service to a specific system or person.

Currently There are Five Basic Types of DoS or DDoS Attack are Common in Internet:

1. consumption of computational resources, such as bandwidth, disk space, or CPU time;
2. disruption of configuration information, such as routing information;
3. disruption of state information, such as unsolicited resetting of TCP sessions;
4. disruption of physical network components.
5. obstructing the communication media between the intended users and the victim so that they can no longer communicate adequately.

Some Common DoS or DDoS Attack Type:

==> ICMP floods ***

==> Teardrop attack ***

==> Peer-to-peer attacks ***

==> Application level floods ***

==> Nuke ***

==> Distributed attack ***

==> Reflected attack ***

==> Unintentional attack ***

To Prevention and Response Including Surviving Attacks, I will add more on my spare time. By this Time You May Go Through Links Bellow:

Useful Links Related To DoS or DDoS:

=> RFC 4732 By Internet Denial-of-Service Considerations
=> How to Prevent Denial of Service Attacks

=> CERT's Guide to DoS attacks.

=>Some CISCO IoS tips for Internet Service Providers By Mehmet Suzen


Any Idea in Your Mind? Please Add it to Comment Section.

Thanks

Ahamed Bauani

HP: +880-1818-BAUANI

-->[*** More Content Is Coming Soon]