| Title |
Checkmate with Denial of Service |
| Type |
Slides
|
| Tags |
DDoS
DoS
|
| Abstract |
Denial-Of-Service is an attempt to make a computer resource unavailable to its intended users and is not new. In recent history April 2009, government and financial sites in the U.S. and South Korea were attacked by DDOS and were brought offline for days. This incident followed the Georgian DDOS attacks in 2008 and Estonian DDOS attacks in 2007. Common attack methods include systems infected with malware that are controlled and all connect to the target host at the same time using Layer 4 (Transport) which are already addressed by anti-DDOS solutions when employed. In 2009 a lethal form of Layer 7 (Application) attack techniques were being examined by Wong Onn Chee of OWASP Foundation Singapore and in 2010 together with Tom Brennan of OWASP Foundation presented the findings publicly for the first time with code samples. Tom Brennan will walk through the history and details of how this lethal HTTP POST DOS technique works, interesting findings in the protocol and the challenges in defending critical infrastructure against targeted attacks and demonstrate and release his open-source tool that can be used to test your own production systems -- or render others useless with the touch of a button from a single laptop.
|
| Authors |
Ryan C. Barnett
Tom Brennan
|
| Submitted |
April 11, 2011 |
| Rating |
Currently 0/5 stars (0 votes).
|
| Correlation |
| Linked to |
---
|
| Event |
Black Hat DC 2011
|
| Resource |
---
|
| Download |
| Source |
BlackHat_DC_2011_Brennan_Denial_Service-Slides.pdf |
| Size |
489.8 KB |
| MD5 |
bb98bbfc59143e2ebf9720ed3e26295b
|
| SHA1 |
33f0ec7ee33761991baa0b04a347f54d5321e265
|
top
