Skip to main content

DDoS Attacks - What Can You Do About Them?

A DDoS or Distributed Denial of Service Attack is an illegitimate effort of a person or group to make your computer network or websites unavailable to its user group. In case of a DDoS attack your computer network or website may stop functioning temporarily or permanently. DDoS attacks are biggest threat to network security.
This article is about how to prevent a computer network or website from DDoS attacks.


Identify a DDoS


If you are experiencing any one the following symptoms, this may be a DDoS attack.

1. You are getting millions of zillions of spam email in your email address attached with the network or website.
2. Network performance is pathetic, opening files and loading a website suddenly turned a nightmare.
3. A particular website is not available for very long time, given your hosting server is not under maintenance.
If you experience any one of these symptoms, this is a probable DDoS attack. Don’t panic you can prevent against these.

Preventing Against DDoS attacks


Use Firewalls like Open BSDs pf(4) packet filter; these acts like a connection proxy. For other BSDs its called synproxy. Ordinary firewalls won’t be able to protect in case of attack on port 80 web service.

Use Clean Pipes to prevent against DDoS Attacks. You can buy these from providers like Tata Communications and Verisign etc. When you use Clean Pipes, all traffic request passes through a cleaning center where bad traffic and good traffic differentiated. Central internet connectivity is a must to use these services.

Use Intrusion Prevention System (IPS) to Stop DDoS Attacks. These systems are effective when DDoS attacks bears signature. However, an IPS not works with behavior based DoS attacks where legitimate is used with bad intentions. A rate based IPS i.e. RBIPS perfect choice to let in legitimate traffic and throw out illegitimate request.

Use DoS Defense i.e. DDS from DDoS Protection. A DDS can handle both rate based attacks and protocol attacks. Also a DDS is able to prevent against connection based DDoS attacks and those associated with legitimate content but with bad intentions.

Use Sinkholding against Blackholding DDoS attacks. In case of DNS or IP address DDoS attack al request are sent to a not actually existing web server or black hole. This can be successfully managed by ISP using Sinkholding which is capable in rejecting bad requests.

Use Application Front End Hardware to stop DDoS attacks. These can be used with switches and routers. When a request approaches to server, the application front end hardware distinguishes between good traffic and bad traffic and mark them as priority, regular and dangerous.

Comments

Popular posts from this blog

10 rules of good parenting

The term parenting sends a shiver down the spine  especially if you live in a nuclear family and going to become a parent; father, mother or guardian. Parenting is not only about raising kids, feeding and sending to school. Indeed parenting is about overall development of a child. Personally I believe, if you do not have kids to raise then too being a grown up adult you are  parenting neighborhood kids in one way or the other.  Kids learn better from surroundings.  Your persona is a reflection of your parents and you are going to transfer that persona to your own kids and the kids near you.

Excellence vs Perfection

There is huge confusion between excellence and perfection. Both are rewarding but...
Perfection has limitations, you can not make anything perfect above 100 marks. This is where either you beat the competition or get beaten. Normally both happens. Excellence is about achieving 100%. You can achieve 100 marks in a given task at that point you may argue that here I achieved full percentage. But analogy says, you have achieved it about the task and not around the task. When you strive to achieve around the task there is no upper limit. For example an student may get 100 out of 100 marks in a given examination does that mean he / she 100 perfect in all those topics around what questions were asked or as that employ that there is no one out there in the world who knows better than the student who have faced an examination. This is why governments take Essay test before selecting you for a given post.
In companies awards are given to best employees do you know why? So other employees try b…

3 Internet based business ideas for beginners

Internet has taken over everything. There is popular phrase make money from internet while sitting. That phrase is completely wrong, I do not agree, you need whole lot of efforts to make any business a success. Internet is a medium using which you can do business. If you looking for Internet based business here are couple of ideas. I believe you have already heard about these but if you are not pretty sure, here we go
Internet Cafe
If you happen to live in a town preferably not a major city Internet cafe could be one option. In major cities high end smartphones are reaching to every palm but in small places they are still a dream gadget for many. Plus in rural areas mobile internet is not very fast. Cable Internet is way better than mobile. You will get customers. Go in your nearest marketplace or search online market like amazon etc, get some second hand computers, a quality printer and ready to go. Do not invest fancy things buy second furniture, and find a place on cheap rental.
Yo…