Web under pressure: DDoS as a Service
Nov. 13, 2013•0 likes•11,736 views
Download to read offline
Report
Technology
Any web project has one important efficiency metric: maximum load. This talk will utilize a nontrivial look at stress testing services: we will see how a harmless instrument can be turned into a DDoS tool.
Denis MakrushinFollow
More Related Content
What's hot
Web proxy serverVikas Merugu
Proxy Serverguest095022
Web Proxy ServerMohit Dhankher
ProxyTriad Square InfoSec
Proxy serversKumar
Firewall & Proxy ServerLakshyaArora12
Similar to Web under pressure: DDoS as a Service
Taking the Fear out of WAFBrian A. McHenry
Reblaze Web Application FirewallJason Newell
Do you lose sleep at night?Nathan Van Gheem
Protect Websites against DDoS attacks with ReblazeJason Newell
Monitoring Network Performance in ChinaThousandEyes
Couchbase and Apache Kafka - Bridging the gap between RDBMS and NoSQLDATAVERSITY
![[Bucharest] #DontTrustTheDarkSide](https://cdn.slidesharecdn.com/ss_thumbnails/owaspeeedarkappsecfinal-151026105354-lva1-app6891-thumbnail.jpg?width=1600&height=908&fit=bounds)
Recently uploaded
Orchestration, Automation and Virtualisation Maturity ModelCSUC - Consorci de Serveis Universitaris de Catalunya
Advancing Equity and Inclusion for Deaf Students in Higher Education3Play Media
Cloud Composer workshop at Airflow Summit 2023.pdfLeah Cole
info_session_gdsc_tmsl .pptxNikitaSingh741518
Framing Few Shot Knowledge Graph Completion with Large Language ModelsMODUL Technology GmbH
EuroBSDCon 2023 - (auto)Installing BSD Systems - Cases using pfSense, TrueNAS...Vinícius Zavam
Web under pressure: DDoS as a Service
- 1. WEB UNDER PRESURE DDoS as a Service Denis Makrushin (@difezza) Kaspersky Lab http://defec.ru/
- 2. It was like that 2
- 3. Nowadays : application layer 3
- 4. Piece of the WEB-bot 4
- 6. Nowadays: DNS Amplification Disadvantages: • Short life cycle of infected machines • Support clouds with a lot of instances • Trivial generators of traffic 6
- 7. Burst in tomorrow: SaaS 7
- 9. Load testing as a Service • Legitimate traffic • The load is not limited by owners of service • Cheap load • Many services do not verify actions • User-owned scenarios • Analysis of a victim for a “heavy" content 9
- 10. Proof of Concept: Loadimpact.com 10
- 11. Analytics 11
- 12. Without registration and SMS: loaddy.ru 12
- 14. SaaS 4 DDoS • • • • Traffic exchange Whois-services Monitoring services All that "disturbs" the victim 14
- 15. If you have conscience 15