Dark Side of the DNS Force
us-16-Wu-Dark-Side-Of-The-DNS-Force
us-16-Wu-Dark-Side-Of-The-DNS-Force
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Intro<br />
Subdomain<br />
Mechanism<br />
Impact<br />
Outro<br />
Good<br />
Bad<br />
Ugly<br />
<strong>DNS</strong> amplification DDoS attacks<br />
• Enablers<br />
• Open <strong>DNS</strong> resolvers<br />
• <strong>DNS</strong> amplifiers<br />
• Legit<br />
• Purpose-built<br />
• Spo<strong>of</strong>ed sending addresses (<strong>of</strong> victims)<br />
Open<br />
Resolver<br />
<strong>DNS</strong> Amplifier<br />
attacker<br />
Open<br />
Resolver<br />
victim