Wow, it really is always DNS! Becoming a Part of the DDoS Problem ( on purpose ).

No ratings

Presented at BSidesColumbus 2019 by

Cody Smith

It's been said that Domain Name System based Distributed Denial of Service attacks are still a large issue for the internet. So, to better analyze and understand the issue I ran a large network of DNS Honeypots on the internet for a year. Their mission? To do one thing, watch when they become part of a DDoS Attack. Together, we'll overview what a DDoS attack is, and how a DNS amplification based attack works. We'll go through what my distributed network looked like, what it cost, and how it was created. Then, we'll break down how my servers have been abused by malicious actors to make them part of the DDoS problem.