[ILUG] [off-topic] DDoS Protection ?

Mon Mar 12 11:41:01 GMT 2001

> I am also very interested in are real life experiences                            
> of being under attack and how you handled this with                               
> your upstreams ?                                                                  

To see how many attacks are looked at and handled                                   
I would suggest http://www.sans.org/current.htm and/or                              
the incidents list on security focus. Also Stephen                                  
Northcutt wrote a great book on incident analysis.                                  

> Also I am interested if you have seen/heard of any                                
> new slants to protecting against DDoS's ?                                         

For this I belive there are two sides...one is defending against                    
attacks and two is to make sure you aren't use as an agent in                       
this type of an attack.                                                             
On the agent prevention side I would recommend reading up                           
on ingress and egress filtering as well as snort...which can                        
look out for signatures for well known DDoS tools. 

On the defence side http://www.washington.edu/People/dad/ is                        
about the best link anybody could give you...                                       

--                                                                                  
"Never settle with words what you can settle with a flamethrower"        