Contents
DDoS stands for “Distributed Denial of Service”. Translated into Spanish, it literally means “distributed attack denial of service”. That is an attack directed at the server from a large number of computers so that it is inoperative. Next, from DOSarrest, we explain in a more detailed way what it is, how it is produced and how to avoid a DDoS attack.
What is a DDoS attack?
The DDoS attack occurs when several computers send a large number of requests to a particular server, to the point that it runs out of resources and, therefore, stops working. At this time, the server can respond in several ways; Depending on the attack, the server can be turned off automatically or simply stop responding to connections.
In any case, before a DDoS attack, the server does not return to normal activity until the end of it, which can occur for two reasons. On the one hand, that computer security experts are able to stop the attack. And, on the other hand, that it is the cybercriminals themselves who decide to end it.
What is a DDoS attack? – DOSarrest
How does a DDoS attack occur?
The concept of an attack of this kind is very simple to understand. What’s more, making a given server run out of resources is relatively easy; it is enough that thousands of people recharge the website again and again for it. However, cybercriminals often use more complete techniques to make a DDoS attack.
One of the most used techniques by the attackers is the use of bonnets. Cybercriminals use networks of computers infected by a virus, which they control remotely. In this way, taking into account that those responsible for the saturation of the server are teams that nobody knows that they are collaborating in this attack. In these cases, finding cybercriminals is very complicated.
How does a DDoS attack occur? – DOSarrest
How to avoid a DDoS attack
The main objective of this type of attacks is to block the websites and infiltrate them through the saturation of the source server. If the attack is not halted, the consequences for the website in question can be very negative: slowness in the process of loading the pages of the website, blocking traffic to the website…
Unfortunately, DDoS attacks are becoming more frequent, so that the IT departments of the companies are making increasing efforts to plan the detection and stoppage of the same.
Here are some tips that are worth taking into account to defend against an attack of a DDoS attack:
- Configuration: it is essential to review in detail the configuration of the Routers and Firewalls in order to stop all those IPs that are not valid. Currently, certain routers and firewalls are prepared to prevent any type of saturation in TCP / UDP protocols. Another tip to follow in relation to the routers is the proper control of the connections through the logging option.
- Plan: in any company, it is essential to have a protocol for action against any DDoS attack. In this way, if an attack of this type occurs, experts in computer security will have a plan to follow, thus minimizing damage significantly.
- IS / IPS: of having IDS / IPS, these are able to detect any misuse of valid protocols as potential attack vectors.
- Traffic: In addition, it is highly advisable to limit the traffic rate coming from a single host in order to DDOS protection that seeks to saturate the server.
- TCP / UDP: Finally, it is convenient to perform a periodic study of all TCP / UDP connections that are made on the server in order to identify the attack patterns.
In an organization, it is key to have the necessary resources both to prevent the DDoS attack and to act against it. Computer security is an issue that must be given the greatest attention in the 21st century.
How to avoid a DDoS attack – DOSarrest
Is a massive DDoS attack expected imminently?
The Hajime botnet was detected for the first time in October 2016. Well, it is currently one of the biggest concerns of computer security experts around the world. Since just a year ago, this malware has evolved by leaps and bounds, developing increasingly complex and dangerous propagation techniques. Current data points to almost 300,000 infected devices worldwide.
Hajime does not have any code or attack functionality; it is only a propagation module since it is a very advanced and cautious type of malware; it uses a large selection of techniques and especially attacks the passwords of the devices to infect them and take the identity of the victims. This is how the device becomes part of the botnet network.
One of the peculiarities of this botnet is that it does not attack a certain type of device; is directed against all those who have an Internet connection.
Some experts in this type of cybercrime assure that other cybercriminals are about to take control of this bonnet, which could trigger a massive attack like the one that took place last October 2016.
In full 2017, the cases of Hacking around the world grow by leaps and bounds. Therefore, it is essential to invest the maximum possible resources, both economic and human capital, in cybersecurity. Doing so can make the difference between a DDos attack attempt and a successful DDos attack that saturates the server and drops the company’s website.
