4. 4
Database
Application
Server
Web Page
API
T畉n c担ng th担ng qua Web Application
T畉n c担ng th担ng qua APIs
T畉n c担ng th担ng qua IP Des
DOWN
DOWN
1. DDoS = Distributed Denial of Service T畉n c担ng t畛 ch畛i
d畛ch v畛 ph但n t叩n.
2. T畉n c担ng DDoS l n畛 l畛c lm ng畛ng ho畉t 畛ng m畛t d畛ch v畛
b畉ng c叩ch lm trn ng畉p n坦 v畛i traffic t畛 nhi畛u ngu畛n.
T畉n c担ng DDoS l g狸?
9. M畛c t畉n c担ng DDoS:
User Datagram
Protocol (UDP)
fragment v畛i 42
Gigabits per second
(Gbps) v 3.5 Million
packets per second
(Mpps), k辿o di 3
gi畛
Multi-vector attack
v畛i 38 Gbps v 4.7
Mpps, k辿o di trong
v嘆ng 2h
C叩c h狸nh th畛c t畉n c担ng DDoS ph畛 bi畉n
#7: For the incoming years, we have plans to expand our network structure and upgrade our capacity to pursuit our vision to become the first choice ISP for both domestic and multi national companies in VN.
#8: Link Q炭y I: https://blog.verisign.com/security/q1-2018-ddos-trends-report-58-percent-of-attacks-employed-multiple-attack-types/
Ti畉ng Vi畛t: https://ictnews.vn/cntt/bao-mat/top-3-nganh-muc-tieu-cua-cac-cuoc-tan-cong-ddos-trong-quy-dau-nam-2018-169430.ict
Link Qu箪 II: https://blog.verisign.com/security/ddos-protection/q2-2018-ddos-trends-report-52-percent-of-attacks-employed-multiple-attack-types/
#15: DNS Reroute:
DNS A records are modified to point attack FQDN to Arbor cloud
Full DNS proxy in cloud will route clean traffic to its destination
Full proxy requires traffic in both directions
Clean Traffic = Inbound + outbound traffic
BGP Reroute
Must divert a minimum of a /24 subnet
Arbor requires 3 days to register routes with Internet Registry
If customer only has a /24, then customer must de-announce the route when Arbor announces it
Traffic returned via GRE
Clean Traffic = Inbound traffic only
By BGP Diversion here we mean the case where the route to the /24 netblock is taken over by a different provider by publishing the route to the Internet.
#16:
DNS Reroute:
DNS A records are modified to point attack FQDN to Arbor cloud
Full DNS proxy in cloud will route clean traffic to its destination
Full proxy requires traffic in both directions
Clean Traffic = Inbound + outbound traffic
BGP Reroute
Must divert a minimum of a /24 subnet
Arbor requires 3 days to register routes with Internet Registry
If customer only has a /24, then customer must de-announce the route when Arbor announces it
Traffic returned via GRE
Clean Traffic = Inbound traffic only
By BGP Diversion here we mean the case where the route to the /24 netblock is taken over by a different provider by publishing the route to the Internet.
#17: DNS Reroute:
DNS A records are modified to point attack FQDN to Arbor cloud
Full DNS proxy in cloud will route clean traffic to its destination
Full proxy requires traffic in both directions
Clean Traffic = Inbound + outbound traffic
BGP Reroute
Must divert a minimum of a /24 subnet
Arbor requires 3 days to register routes with Internet Registry
If customer only has a /24, then customer must de-announce the route when Arbor announces it
Traffic returned via GRE
Clean Traffic = Inbound traffic only
By BGP Diversion here we mean the case where the route to the /24 netblock is taken over by a different provider by publishing the route to the Internet.
#18:
DNS Reroute:
DNS A records are modified to point attack FQDN to Arbor cloud
Full DNS proxy in cloud will route clean traffic to its destination
Full proxy requires traffic in both directions
Clean Traffic = Inbound + outbound traffic
BGP Reroute
Must divert a minimum of a /24 subnet
Arbor requires 3 days to register routes with Internet Registry
If customer only has a /24, then customer must de-announce the route when Arbor announces it
Traffic returned via GRE
Clean Traffic = Inbound traffic only
By BGP Diversion here we mean the case where the route to the /24 netblock is taken over by a different provider by publishing the route to the Internet.
#19:
DNS Reroute:
DNS A records are modified to point attack FQDN to Arbor cloud
Full DNS proxy in cloud will route clean traffic to its destination
Full proxy requires traffic in both directions
Clean Traffic = Inbound + outbound traffic
BGP Reroute
Must divert a minimum of a /24 subnet
Arbor requires 3 days to register routes with Internet Registry
If customer only has a /24, then customer must de-announce the route when Arbor announces it
Traffic returned via GRE
Clean Traffic = Inbound traffic only
By BGP Diversion here we mean the case where the route to the /24 netblock is taken over by a different provider by publishing the route to the Internet.
#20:
DNS Reroute:
DNS A records are modified to point attack FQDN to Arbor cloud
Full DNS proxy in cloud will route clean traffic to its destination
Full proxy requires traffic in both directions
Clean Traffic = Inbound + outbound traffic
BGP Reroute
Must divert a minimum of a /24 subnet
Arbor requires 3 days to register routes with Internet Registry
If customer only has a /24, then customer must de-announce the route when Arbor announces it
Traffic returned via GRE
Clean Traffic = Inbound traffic only
By BGP Diversion here we mean the case where the route to the /24 netblock is taken over by a different provider by publishing the route to the Internet.
#21:
DNS Reroute:
DNS A records are modified to point attack FQDN to Arbor cloud
Full DNS proxy in cloud will route clean traffic to its destination
Full proxy requires traffic in both directions
Clean Traffic = Inbound + outbound traffic
BGP Reroute
Must divert a minimum of a /24 subnet
Arbor requires 3 days to register routes with Internet Registry
If customer only has a /24, then customer must de-announce the route when Arbor announces it
Traffic returned via GRE
Clean Traffic = Inbound traffic only
By BGP Diversion here we mean the case where the route to the /24 netblock is taken over by a different provider by publishing the route to the Internet.
#22:
DNS Reroute:
DNS A records are modified to point attack FQDN to Arbor cloud
Full DNS proxy in cloud will route clean traffic to its destination
Full proxy requires traffic in both directions
Clean Traffic = Inbound + outbound traffic
BGP Reroute
Must divert a minimum of a /24 subnet
Arbor requires 3 days to register routes with Internet Registry
If customer only has a /24, then customer must de-announce the route when Arbor announces it
Traffic returned via GRE
Clean Traffic = Inbound traffic only
By BGP Diversion here we mean the case where the route to the /24 netblock is taken over by a different provider by publishing the route to the Internet.
#35: For the incoming years, we have plans to expand our network structure and upgrade our capacity to pursuit our vision to become the first choice ISP for both domestic and multi national companies in VN.