DDoS attacks - are we really at war?

Arbor Networks The chief safety scientist of Craig Labovitz Use the company's ATLAS Internet mapping technology analyzes DDoS attack , According to him , The biggest problem these websites face is flood attack .

He said , stay 2010 During the year ,Arbor Networks It was observed that 50+ Gbps Many in the range DDoS attack .

“ These large-scale flooding attacks usually exceed the total inbound bandwidth capacity of the backbone links of the data center and operators （ Usually it is OC192 / 10 Gbps）”, He was in His security blog says .

and , He went on to add , Despite thousands of tweets 、 News articles and endless hype , But most of the attacks last week were relatively small and simple .

He explained that the ：“ In short , In addition to the strict censorship of the media , These attacks are not noticeable ”.

for example , stay Cablegate The third day after the initial release of the document （12 month 1 Japan ） , His company analyzed a number of WikiLeaks Hosting site DDoS Activities , He said ,DDoS Traffic never exceeds 3-4 Gbps.

He claimed that , Mitigating attacks on this scale is important for 1/2 layer ISP And large content / Managed service providers are fairly routine , And more disturbing than the imminent threat to critical infrastructure ——“ Or as an Internet engineer explained ‘ Easy to stop ’ ”.

Labovitz Express , In an incident last week , about 20% Retaliatory attack DDoS HTTP The request comes from a new LOIC variant , Predictably enough ,LOIC-2.

“LOIC A new version of the —— Yes LOIC Complete rewrite of —— Support extra ‘ hive ’ Remote control command channel , Include RSS、Twitter and Facebook”, He said .

“ what's more ,LOIC-2 Support two new ‘ Slow down ’ Attack methods （ That is, the client intentionally extends HTTP Transaction time to increase the burden on the victim server DDoS Strategy ）”, He added .

and ,Arbor Networks The chief scientist went on to say , Although the last round of attacks led to a brief interruption , But most operators and hosting service providers can quickly filter attack traffic .

Besides , He said , These attacks are mainly aimed at web pages or mild reading blogs , Rather than a more critical back-end infrastructure for commercial transactions .

“ By the end of this week , Anonymous followers mostly abandoned their attack plans because they were ineffective ,” He said .

“ therefore , Final , I suggest going around WikiLeaks supporters and opponents DDoS An attack is far from a cyber war ,” He added .

“ Although its title is far from sexy , But network sabotage may be a more appropriate description . Similarly , The foreign policy column will hactivist DDoS The number is equivalent to the sit in of young people all over the world .”