| Publisher | Kumamoto University | ||
|---|---|---|---|
| Format | 127.0KB PDF | Date added | 29 Oct 2004 |
| Topics | Network Security, Denial of Service, Intrusion Detection Systems | ||
| Downloads | 79 | ||
The syslog messages of the topdomain DNS servers in Kumamoto University were statistically investigated when having receiving a large amount of DNS query packets like a Distributed Denial-of-Service (DDoS) attack. The interesting results are: The DNS query-based DDoS attacking packets considerably include reverse (PTR) records. The PTR records include a lot of unregistered IP addresses of the university as their query contents. Thus, one can detect the DNS query-based DDoS attack by only watching the traffic of unregistered IP address-based DNS query PTR record packets. Also, the author developed and implemented an Intrusion Prevention System (IPS) for the DNS query-based DDoS attack on the top domain DNS servers.
Did you find this white paper useful?
11 out of 14 users found this white paper useful
Related white papers
MessageLabs Intelligence : 2009 security Predictions
Having analyzed the global threat landscape for almost a decade, MessageLabs Team Skeptic™ is comprised of many world-renowned malware and spam experts who have a global view of threats across...
IDC Vendor Spotlight
Organised ubiquity is a must for organisations to sucessfully "project" their users in any given landspace, at any given time, with secuirty policy. This White Paper covers issues surrounding secure...
Trend Micro Enterprise Security white paper
This white paper reviews the content security threat landscape and how it has evolved into a more dangerous and high risk environment. The paper discussed how conventional content security approaches...
Smart Protection E-Book
"Outthink the Threat: Why conventional protection is no match for new data-stealing malware & the Trend Micro Smart Protection Network is." Discover how cyber criminals are rendering traditional security solutions...
Secure Desktop On-Demand Webcast
The desktop or endpoint is one of the most vulnerable parts of your environment. Threats are everywhere. You have users who love to experiment with device settings (only to wonder...
Trend Micro Web Threats WP
Web threats pose a broad range of risks, including financial damages, identity theft, loss of confidential business information, theft of network resources, damaged brand or personal reputation, and erosion of...
Resource Guide: Workstation Productivity
Desktop computers have come a long way in terms of value and performance for the average user but many of today's more demanding applications require more advanced workstations with even...
