DoS и DDoS атаки

Уровень 0 · материалов: 4

В кластер входят документы, описывающие технические методы и механизмы реализации атак типа Denial of Service, и не входят документы, не касающиеся принудительного вывода сервисов из строя.

Общие признаки: отказ в обслуживании, исчерпание ресурсов сервера, технические механизмы атак, botnet

Группа выше: DDoS-атаки и защита от них

Материалы

• #6089 — Analysis of Slow HTTP POST Denial of Service Attacks — Представитель этого кластера

  Атака на отказ в обслуживании методом slow HTTP POST — bulletproofcupid

  Смысл: The text explains the mechanism of the Slow HTTP POST attack, demonstrating how a small amount of bandwidth can be used to exhaust server resources and cause a denial of service. It highlights the simplicity of the attack and the vulnerability of many medium-sized websites.

  The text explains how Slow HTTP POST attacks exploit the HTTP protocol to crash web servers using minimal bandwidth and legitimate-looking traffic.

• #11957 — Vulnerabilities of Web Servers to Slow Read DoS Attacks

  Уязвимости серверов к медленному чтению — Pushkind

  Смысл: The text explains a specific type of Denial of Service attack called 'Slow Read,' where a client intentionally reads server responses very slowly to exhaust server resources and crash the service.

  The author describes how Slow Read DoS attacks exploit server resource management to cause outages and introduces the slowhttptest tool for vulnerability assessment.

• #34014 — Investigation of the Mēris Botnet and Largest DDoS Attack

  Ботнет Mēris: расследуем крупнейшую DDoS-атаку в истории интернета — BarakAdama

  Смысл: The text serves as a technical post-mortem and security alert regarding the Mēris botnet, explaining how it achieves unprecedented scale and intensity by compromising high-performance network hardware and using HTTP pipelining to overwhelm targets.

  Yandex and Qrator Labs analyzed the Mēris botnet, which used compromised Mikrotik routers to launch a record-breaking 21.8 million RPS DDoS attack using HTTP pipelining.

• #20929 — DDoS Attack on Echo of Moscow Website

  Сайт радиостанции «Эхо Москвы» атаковали сразу три ботнета — 0xLGA

  Смысл: The text provides a technical analysis of a multi-vector DDoS attack on the 'Echo of Moscow' website, detailing the types of floods (SYN, UDP, HTTP) and the behavior of three different botnets involved.

  QRATOR Labs analyzed a multi-vector DDoS attack on 'Echo of Moscow' involving three distinct botnets using SYN, UDP, and HTTP floods.