DDoS attack and defense: for the lulz

Presented at Still Hacking Anyway (SHA2017), Aug. 8, 2017, 10 a.m. (60 minutes).

In this talk you'll be given a very technical overview of DDoS and mitigation techniques; their effectiveness will be evaluated with real-life examples. #NetworkSecurity DDoS attacks are a major concern for many website owners and hosting businesses. This talk will describe different effective and ineffective attacks and mitigations, lessons learned from over ten years in the hosting business and experiencing DDoS attacks. Highlights will include snakeoil DDoS appliances, incompetent DDoS Mitigation providers, and that Anonymous attack against the presenter's websites. Topics: BGP, Anycast, Blackholing, Firewalling, Loadbalancing, x86 server and DDoS appliance performance.

Presenters:

• Craig
  I've been in system administration for over ten years, and have lots of experience in the managed webhosting business. I'm hosting government and industry websites and frequently experience DDoS attacks. tbd

Links:

• https://program.sha2017.org/events/174.html

Similar Presentations:

• DEF CON 22 (2014) / Don't DDoS Me Bro: Practical DDoS Defense
• HOPE Number Nine (2012) / Activist DDoS Attacks: When Analogies and Metaphors Fail
• Black Hat USA 2013 / Denying Service to DDoS Protection Services