What is DDOS Attack??
Before knowing that lets know what is botnet?
Botnet is defined as group of internet connected devices. It is connection between the computers, smartphones, and IoT. Botnet is combination of one or more bots.
Botnet Attack - Botnets can be used to perform distributed denial-of-service attack (DDoS attack), steal data, send spam, and allows the attacker to access the device and its connection.
DOS(Denial of Service) attack is cyberattack in which machine or network resource is made unavailable to its intended users by temporarily or indefinitely disrupting services of a host connected to a network. As the name suggests DOS denial of service means the particular host/website which is connected to the internet disrupt causing a error.
Now lets learn about DDOS attack, DDOS means Distributed Denial-of-Service attack the incoming traffic flooding the victim originates from many different sources. Attempting to block a single source is not possible because there are multiple sources. DOS attacks often target sites or services hosted on high-profile web servers such as banks or credit card payment gateways. Revenge, blackmail and hacktivism can motivate these attacks.
Lets now have an example, Imagine you are trying to book a concert ticket and there are very limited seats, and the one who wants to book a ticket are given a queue number for booking. The bad guys will flood with the attack all at once, to try to make the website too busy and slow it down or even make it stop working altogether.
On February 7, 2000, yahoo.com was brought to a halt for a few hours, as the victim of a distributed denial of service attack (DDoS).On the next day, its shares rose about $16, or 4.5 percent as the failure was blamed on hackers rather than on an internal glitch, unlike a fault with eBay earlier that year.
Attacker sends a large ping packet to the victim's machine. It causes the service to hang or crash.
There are few DOS attacks which are listed below
Land exploit is DOS attack in which a program sends a TCP SYN packet where the target and source addresses are the same and port numbers are same.
Smurf is DOS attack involved forged ICMP packets send to broadcast address.
SYN Attack floods a targeted system with a series of SYN packets.
Targa is program that can be used to run 8 different DOS Attacks.
and many more
To minimize the DOS Attack you could do the following measures Bandwidth limitations, Run the least of services, allow only necessary traffic, block IP Addresses.
The way this attack work, there is nothing that can be done to prevent a DOS entirely. we could definitely take precautionary steps.
Preventing the attack
- Install The IDS (Intrusion detection system)
- Use Scanning Tools (eg: Wireshark)
- Keeping the network secure.
Comments
Post a Comment