FortiDDos DDoS Attack Mitigation Guide - Fortinet

Table of Contents
Introduction.............................................................................................. 1
Defining DDoS attacks...................................................................................... 1
Attack scenarios ............................................................................................... 1
Causes of attacks ............................................................................................. 1
Motivation behind attacks ................................................................................ 2
Virus infections, botnets and distributed attack tools ...................................... 2
Most common current generation DDoS attacks ............................................. 4
SYN flood.................................................................................................... 4
Zombie flood............................................................................................... 4
ICMP flood.................................................................................................. 4
TCP/UDP port flood.................................................................................... 4
Fragment flood............................................................................................ 5
Anomalous packet flood............................................................................. 5
HTTP GET flood.......................................................................................... 5
Blended attacks.......................................................................................... 5
Floods from unwanted geographical areas ................................................ 5
Myths and realities about DDoS attacks .......................................................... 5
Home remedies for simple and small DDoS attacks ........................................ 6
Anti-DDoS appliances ...................................................................................... 7
Carrier DDoS mitigation solutions .............................................................. 7
Custom logic (FPGA or ASIC) based internet data center (IDC), web hosting
and web property DDoS mitigation solutions............................................. 7
Software based web property DDoS mitigation solutions.......................... 8
Things to look for in Anti-DDoS equipment...................................................... 8
Latest technology ....................................................................................... 8
Centralized monitoring................................................................................ 8
Visibility into normal network traffic patterns.............................................. 8
Alerting mechanisms .................................................................................. 8
Filtering mechanisms to reduce false positives.......................................... 8
Low latency................................................................................................. 8
Hardware logic for Anti-DDoS .................................................................... 9
Bypass and redundancy ............................................................................. 9
Extensible architecture ............................................................................... 9
FortiDDoS DDoS Attack Mitigation Guide
28-100-167076-20120501 iii
http://docs.fortinet.com/ • Feedback