Types of DDoS Attacks & Tools

Dynamic IP addresses are an effective way to defeat IP-based defense systems: launch application-level attacks that originate from real—but dynamic—IP addresses. This paper outlines some of the most common variations of dynamic IP attacks, explores challenges in defending against them, and points to best practices for thwarting these attacks.

February 23, 2016 02:00 PM

Types of DDoS attacks that target network resources use a large volume of illegitimate traffic to try to consume, or flood, all of a victim’s network bandwidth. In a typical flooding attack, the offense is distributed among an army of thousands of volunteered or compromised computers - a botnet - that sends a huge amount of traffic to the targeted site, overwhelming its network.

January 5, 2016 02:00 PM

Types of DDoS attacks that target server resources attempt to exhaust a server's processing capabilities or memory to cause a DDoS security weakness. An attacker takes advantage of an existing vulnerability on the target server or in a communication protocol. The target server - website, web application server, web application firewall, or intrusion prevention system - becomes so busy handling illegitimate requests that it can no longer handle legitimate requests.

January 5, 2016 02:00 PM

SSL is a method of encryption used by various network commuication protocols. Conceptually, SSL runs above TCP/IP, providing security to users communicating over other protocols by encrypting communications and authenticating communicating parties. SSL-based DoS attacks and DDoS attacks target the SSL handshake mechanism, send garbage data to the SSL server, or abuse functions related to the SSL encryption key negotiation process.

January 5, 2016 02:00 PM

Types of DDoS attacks that target server resources attempt to exhaust a server's processing capabilities or memory and aim to cause a DDoS security weakness. An attacker takes advantage of an existing vulnerability on the  target server or in a communication protocol. The target server - website, web  application server, web application firewall, or intrusion prevention system - becomes so busy handling illegitimate requests  that it can no longer handle legitimate requests.

January 5, 2016 02:00 PM