DDoS DNS attacks are old-school, unsophisticated … and they’re back

[vtqhtr413]

Content source

https://go.theregister.com/feed/www.theregister.com/2023/03/29/ddos_dns_attacks_are_oldschool/

The DDoS attacks themselves are getting bigger, says Klaus Darilion, head of operations of the anycast service RcodeZero DNS, because the internet itself is getting bigger and attackers have more bandwidth to play with. They're also more automated, he continues, with hackers targeting multiple companies at the same time, constantly searching for weak points. It's one thing to flood an organization's public-facing web page with traffic, effectively forcing it offline. But these volumetric attacks are well understood, as are the mitigation techniques needed to frustrate them. Moreover, while a retailer or financial institution clearly suffers if their main page is taken off-line, that's not necessarily the case for other organizations. Which means cyber criminals are casting their net much wider. In the case of last year's incidents, Darilion says, "They made volumetric attacks, just to fill up the bandwidth of certain companies. But they also made random subdomain attacks and high DNS query rates to overwhelm authoritative DNS servers and fill up state-tables of firewalls." This can prevent an organization not just doing business online, but doing any business at all. Darilion explains, "DNS is a rather

DDoS DNS attacks are old-school, unsophisticated, and back

So why would you handle them on your own?

go.theregister.com

 

[vtqhtr413]

Project Shield is what is known as a reverse proxy. The platform’s servers receive traffic requests on a website’s behalf and then send traffic to the servers of the website that is using the security product. Google said Project Shield protects against DDoS by filtering harmful traffic and by caching versions of a website’s content to serve to the site’s visitors. This caching reduces traffic requests to a site’s server, absorbing potential DDoS attacks. Additionally, Project Shield incorporates these additional features to protect clients against DDoS attacks: Load balancing distributes network traffic to prevent failure caused by overloading a particular resource, according to IBM. It improves the performance and

With political ‘hacktivism’ on the rise, Google launches Project Shield to fight DDoS attacks

In what it calls a bid to save “democratic processes worldwide,” Google Cloud has released Project Shield.

www.techrepublic.com