Skip to main content

DDoS Attacks - What Can You Do About Them?

A DDoS or Distributed Denial of Service Attack is an illegitimate effort of a person or group to make your computer network or websites unavailable to its user group. In case of a DDoS attack your computer network or website may stop functioning temporarily or permanently. DDoS attacks are biggest threat to network security.
This article is about how to prevent a computer network or website from DDoS attacks.


Identify a DDoS


If you are experiencing any one the following symptoms, this may be a DDoS attack.

1. You are getting millions of zillions of spam email in your email address attached with the network or website.
2. Network performance is pathetic, opening files and loading a website suddenly turned a nightmare.
3. A particular website is not available for very long time, given your hosting server is not under maintenance.
If you experience any one of these symptoms, this is a probable DDoS attack. Don’t panic you can prevent against these.

Preventing Against DDoS attacks


Use Firewalls like Open BSDs pf(4) packet filter; these acts like a connection proxy. For other BSDs its called synproxy. Ordinary firewalls won’t be able to protect in case of attack on port 80 web service.

Use Clean Pipes to prevent against DDoS Attacks. You can buy these from providers like Tata Communications and Verisign etc. When you use Clean Pipes, all traffic request passes through a cleaning center where bad traffic and good traffic differentiated. Central internet connectivity is a must to use these services.

Use Intrusion Prevention System (IPS) to Stop DDoS Attacks. These systems are effective when DDoS attacks bears signature. However, an IPS not works with behavior based DoS attacks where legitimate is used with bad intentions. A rate based IPS i.e. RBIPS perfect choice to let in legitimate traffic and throw out illegitimate request.

Use DoS Defense i.e. DDS from DDoS Protection. A DDS can handle both rate based attacks and protocol attacks. Also a DDS is able to prevent against connection based DDoS attacks and those associated with legitimate content but with bad intentions.

Use Sinkholding against Blackholding DDoS attacks. In case of DNS or IP address DDoS attack al request are sent to a not actually existing web server or black hole. This can be successfully managed by ISP using Sinkholding which is capable in rejecting bad requests.

Use Application Front End Hardware to stop DDoS attacks. These can be used with switches and routers. When a request approaches to server, the application front end hardware distinguishes between good traffic and bad traffic and mark them as priority, regular and dangerous.

Comments

Popular posts from this blog

Learn to read

Do not read to learn. Kids go school for reading and comeback exhausted. In many higher education institutions Ph.D candidates read and compile thesis based on how much they have learnt based from reading over say 3 or 5 years or may be more sometime with grant or without grant. Often I have seen one trend the people who impress you own many books, think any name that come to your mind and check what the person read. You will find a coal business person may have books on literature. A mathematics professor may have books of archeology. Talk to them. Often you will find the person attached with a certain profession can only speak or debate around that area only. Or discuss something random and you will be taken that certain area of work or passion. Consider sports. Cricket. Jonty  Rhodes best fielder and enjoys water sports.  The successful people are open, they learn from everywhere and apply those ideas in personal development and profession. No matter how many money making classes yo

How to transfer ownership of a Facebook Page?

Mergers and Acquisitions makes business world dynamic. The largest example to this I have seen when Marissa Mayer joined Yahoo Inc. The girl is really rocking with her excellent business strategies. Today most of the businesses have Facebook Page for company / organization. When someone acquires a business, owner also wants to get control on Facebook Page so as to take old customers along. Here is how to transfer Facebook Page ownership.

Why documentation is important for bloggers

More often I received requests to improve website SEO or build a new website or improve an existing one. One common problem with lot of those website owners and bloggers is they do not have any documents about their expectations. They say do it best, do it as you like, I mean business. Or maximum they present some similar site. Imagine a legal professional showing you a similar site and its about a hotel or resort. That is not the story of most novice only. Even people in IoT business since over a decade and software professionals act numb. This simply put off me. Whenever you start a blog or website, ask yourself Why I am creating this website? Who are my prospects? What I expect from this website? How this website well fulfill my expectation? How I want this site to look like? How I will promote this website? How often I will need upgrade? How much budget and time I can allocate for this? Write down answers to above questions and any additional one that you have? To help you design p