Understanding & Mitigating Large Scale DoS Attacks

Explore large-scale Distributed Denial of Service (DDoS) attacks and their mitigation strategies in this comprehensive conference talk from TROOPERS13. Delve into various attack sizes, types, and tools used by attackers, including HPSlow HTTP. Learn about effective mitigation techniques, the importance of teaming up with Internet Service Providers (ISPs), and implementing purpose-built solutions. Examine common myths surrounding DDoS attacks, early warning systems, and the technical aspects of criminal intent. Gain insights on attacker focus, monitoring strategies, and establishing multiple defense lines. Discover the role of Pastebin in attacks, the importance of testing and vendor trust, cloud-based approaches, and developing long-term defense plans. Address spoof detection techniques and prepare for multi-vector attacks to enhance your organization's cybersecurity posture.

Intro
About me
Attack sizes
Attack types
Tools
HP
Slow HTTP
Mitigation
Experiencing DDoS
Team up with ISP
Countermeasures
Purposebuilt solutions
Mitigation console
Myths
Early warnings
Technical criminal intent
Attacker focus
Monitoring
Several Defense Lines
Pastebin
Testing
Trusting Vendors
Cloudbased Approach
Longterm Plan
Spoof Detection
Multivector Attacks