More information about DDoS Attack

[tarekma7]

What is a DDoS Attack?

A distributed denial-of-service (DDoS) attack is a malicious attempt to disrupt normal traffic of a targeted server, service or network by overwhelming the target or its surrounding infrastructure with a flood of Internet traffic. DDoS attacks achieve effectiveness by utilizing multiple compromised computer systems as sources of attack traffic. Exploited machines can include computers and other networked resources such as IoT devices. From a high level, a DDoS attack is like a traffic jam clogging up with highway, preventing regular traffic from arriving at its desired destination.

How does a DDoS attack work?

A DDoS attack requires an attacker to gain control of a network of online machines in order to carry out an attack. Computers and other machines (such as IoT devices) are infected with malware, turning each one into a bot (or zombie). The attacker then has remote control over the group of bots, which is called a botnet.

Once a botnet has been established, the attacker is able to direct the machines by sending updated instructions to each bot via a method of remote control. When the IP address of a victim is targeted by the botnet, each bot will respond by sending requests to the target, potentially causing the targeted server or network to overflow capacity, resulting in a denial-of-service to normal traffic. Because each bot is a legitimate Internet device, separating the attack traffic from normal traffic can be difficult.

What are common types of DDoS attacks?

Different DDoS attack vectors target varying components of a network connection. In order to understand how different DDoS attacks work, it is necessary to know how a network connection is made. A network connection on the Internet is composed of many different components or “layers”. Like building a house from the ground up, each step in the model has a different purpose. The OSI model, shown below, is a conceptual framework used to describe network connectivity in 7 distinct layers.

Continue reading HERE

[Mike]

A big hurdle to thwarting the DDoS phenomenon is that it’s heterogeneous and spans a variety of different tactics. To begin with, there are three overarching categories of these attacks that form the backbone of this ecosystem:

• Volume-based (volumetric) attacks are the “classic” ones that congest a target network’s bandwidth with a hefty amount of traffic packets.
  
  
• Protocol attacks are aimed at exhausting server or firewall resources.
  
  
• Application layer (layer 7 DDoS) attacks zero in on specific web applications rather than the whole network. These ones are particularly hard to prevent and mitigate while being relatively easy to orchestrate.
  
  
  

Furthermore, there are dozens of sub-types that fall into either one of the above generic groups but exhibit unique characteristics. Here’s a complete breakdown of the present-day DDoS attack methods.

Are you Ready for These 26 Different Types of DDoS Attacks?

1. SYN Flood
2. LAND attack
3. SYN-ACK Flood
4. ACK & PUSH ACK Flood
5. Fragmented ACK Flood
6. Spoofed Session Flood (Fake Session Attack)
7. UDP Flood
8. DNS Flood
9. VoIP Flood
10. NTP Flood (NTP Amplification)
11. CHARGEN Flood
12. SSDP Flood
13. SNMP Flood (SNMP Amplification)
14. HTTP Flood
15. Recursive HTTP GET Flood
16. ICMP Flood
17. Misused Application Attack
18. IP Null Attack
19. Smurf Attack
20. Fraggle Attack
21. Ping of Death Attack
22. Slowloris
23. Low Orbit Ion Cannon (LOIC)
24. High Orbit Ion Cannon (HOIC)
25. ReDoS
26. Zero-Day DDoS


Read more Here

[tarekma7]

How to have protection against DDOS attacks? Is there any safe method compatible with forum software?

[Mike]

How to have protection against DDOS attacks? Is there any safe method compatible with forum software?

DDOS is a server attack, not a site attack so has nothing to do with the forum software.