Search

This research delves into Distributed Denial of Service (DDoS) attacks, investigating their types, tactics, and mitigation. DDoS attacks are categorized into volumetric, TCP-based, and application layer attacks, revealing their mechanics and accessibility through stressors and booters. Additionally, the study explores attack methods, such as UDP flood and amplification attacks, emphasizing their impact and challenges. It highlights the need for proactive cybersecurity measures. The research also discusses booters and stressors, tools used by cybercriminals, and mitigation techniques involving scrubbers, firewalls, and load balancers. In conclusion, this research contributes to understanding the evolving DDoS threat landscape, emphasizing the importance of advanced detection and mitigation. Collaborative defence strategies and economic implications are also discussed, promoting network security in an interconnected world. [ABSTRACT FROM AUTHOR]

The Domain Name System (DNS) is a critical internet infrastructure component, that translates domain names to IP addresses. This study examines the persistent threat of DNS amplification attacks, which exploit certain DNS servers to magnify query responses, causing network congestion. Despite existing mitigations like Response Rate Limiting (RRL) and DNS Security Extensions (DNSSEC), these attacks remain prevalent. Our comprehensive analysis of over 1.7 million IP addresses reveals that approximately 14.77% of Internet DNS servers support recursive queries without access controls. Notably, vulnerable servers are distributed globally, with Asia, Africa, and South America showing the highest vulnerability rates. This research underscores the urgency of enhancing DNS server security. Recommendations include disabling recursion or implementing strict access controls, deploying rate-limiting measures, and restricting "ANY" queries to mitigate DNS amplification attacks. Collaboration between regulatory bodies and network operators is crucial, especially for government infrastructure. In conclusion, this study provides crucial insights into the state of public DNS servers, their vulnerabilities, and the ongoing threat of DNS amplification attacks. As the internet evolves, vigilance and proactive measures are essential to protect DNS service integrity and availability. [ABSTRACT FROM AUTHOR]