We started talking about DDOS as the first topic and the use of external providers for DDOS filtering in the Internet core. Then we looked at the use of IDS systems for scanning traffic to detect DOS attacks, and why it’s not used. Well, some people do, but “in real life” IDS needs specialist expertise that causes more problems than it solves.
Then we looked at application based attacks and using Load Balancers to mitigate them. As well as a number of system / server design choices that might help to solve problems.
And then we realised that we didn’t have any more time.
EtherealMind – how much bandwidth for DDOS is enough
EtherealMind – TCP Syn Cookies as DDOS defence
Cisco DDOS Appliances – Guard and Detectors – White Paper
Subscribe in iTunes
You can subscribe in iTunes by clicking on the logo here.
Media Player and MP3 Download
You can subscribe to the Podcast RSS feed
Podcast: Play in new window | Download (Duration: 52:46 — 24.2MB)
About Greg Ferro
