Detection and Exploitation of Amplification Attacks in the Wild

No ratings

Presented at CarolinaCon15 2019 by

Smokey

Over the next forty-five minutes we will discuss three examples of amplification attacks, how to identify them, and how to leverage them to induce failures in systems. At a base level an amplification circuit takes some signal as an input and has as an output another signal of greater magnitude than the input. Our first case study will cover over driving tube power amps, and introduce the idea of signal amplification and how it can be used beyond its intended purpose. Our second case study will review DNS amplification attacks, and walk through from discovery to exploitation. Our final case study will cover a traditional three tier web application, and how to use amplification attacks to induce DOS states at various layers.