computer, internet, programming, Microsoft Dynamics, Oracle, Java, J2EE, EJB, SAP, ecommerce strategies, hightech jobs, h1b, web design, MS SQL Server, reporting, customizations, software, ERP, MRP, accounting systems, CRM - popular articles
On Denial of Service Attacks
It is clear, to me at least, that steps should be taken to prevent DDoS attempts at some point in the network where the bandwidth can cope. This is, usually, before it hits the destination server. Firewall hardware on the main connection to an ISP is one of the best places to block such attempts, but the problem arises from the distributed nature of these attacks. It is not a matter of blocking a single IP address, or even a single range, and trying to block all of the subnets usually prevents legitimate users accessing the site, which is what the attackers intended all along.
One approach to preventing this would be to detect IP addresses which are repeatedly sending the same data to the same place, such as large ping packets going to the same hosted server, or patterns in the traffic, and selectively block or delay such packets with respect to legitimate packets from IP addresses seen much less frequently, usually characteristic of real site visitors.
Another approach is to drop unwanted packets directly, rather than wasting time and resources replying to those packets, and to prioritise based on protocol - giving HTTP priority over e.g. ICMP.
Of course, this doesn't prevent attacks which utilise a large number of HTTP connections, filling the server's connection pool and preventing other users establishing a link to the server, but there are often modules for the web server software itself which can detect such activity and prioritise traffic, or drop connections which fit a certain characteristic pattern.
Distributed Denial of Service attacks are almost impossible to entirely block or prevent, but measures are easily introduced which can limit their effectiveness. Ultimately, the real source must be determined in order to stop such an attack, but this usually means tracing connections back through several computers which have been used without the owner's knowledge, usually by means of remote control software installed silently. Performing such a trace is difficult at best, and even authorities struggle to reach the end of the chain and determine the real source.
About The Author:
Bryce Whitty owns and runs computer repair website called Technibble.com. A website that provides technical how-to’s for repairing your computer. Technibble also has many guides for getting into the computer business or managing your existing one. We also cover other side topics such as Security and Software.Alba Spectrum popular articles series: FAQ, Reviews, Introductions, Product Selections,
Advises, Definitions, online marketing
We are serving wholesale & retail customers in
Illinois, California, Texas, Wisconsin, New York, Washington, Ohio, Michigan,
Indiana, Arizona, New Mexico, Louisiana, Florida, Georgia, Minnesota, Utah, Virginia, Georgia, Hawaii,
Iowa, Colorado, Ontario, Quebec, Alberta, British Colombia. We also serve customer
internationally in New Zealand, Europe: UK, France, Poland, Italy, Germany, Russia, India, Byrma, Thailand, Holland, Denmark, Sweden, Norway, Indonesia, Austria, New Zealand, Pakistan, Afghanistan, Iran, Spain, Argentina, Brazil, Chile, Uruguay, Paraguay, Peru, Equador, Colombia, Venezuela, Panama, Costa Rica, Canada, South Africa, Nigeria,
Portugal, Greece, Turkey, Asia: India, China, Philippines, South Korea, plus business metros: Chicago, Los Angeles, Phoenix, Boston, Atlanta, Minneapolis, Fargo, Seattle, Miami, Orlando, Detroit, Buffalo, Toronto, Paris, London, Montreal, Denver, Warsaw, Berlin, Prague, Rome, Karachi, Sao Paulo, Rio de Janeiro, Moscow, Buenos Aires, Dehli, Mumbai, Beigin, Cairo, San Francisco, Fremont, Naperville, Oakland, Melburn, Sidney, Sent Petersburg, Tampa, New Orleans, Houston, Dallas, Mexico City, Bogota, Caracas, Lima, Salvador, Recife, Brasilia, Curitiba, Goiania. http://www.albaspectrum.com