> -----Original Message-----
> From: listbounce (at) securityfocus (dot) com [email concealed]
> [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On Behalf Of Kandala, Nham
> Sent: Thursday, August 02, 2007 7:38 AM
> To: auto13925 (at) hushmail (dot) com [email concealed]; realcases (at) securityfocus (dot) com [email concealed]
> Subject: RE: Advise on DDoS attck
>
> In my opinion, One way you can defend against DDoS attacks is
> to get more bandwidth than the combined bandwidth used by
> DDoS attack and wear out the attacker.
DDoS attacks are not necessarily resource-starvation attacks;
even when they are, the resource being exhausted may not be bandwidth.
So this advice is pertinent only to the largest sub-sub-class of DDoS
attacks.
Where the attack is, in fact, an attempt to exhaust all available
bandwidth, it may be used via a botnet or other attack multiplier
such that purchasing sufficient bandwidth to exceed the attack becomes
cost-prohibitive.
> From: listbounce (at) securityfocus (dot) com [email concealed]
> [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On Behalf Of Kandala, Nham
> Sent: Thursday, August 02, 2007 7:38 AM
> To: auto13925 (at) hushmail (dot) com [email concealed]; realcases (at) securityfocus (dot) com [email concealed]
> Subject: RE: Advise on DDoS attck
>
> In my opinion, One way you can defend against DDoS attacks is
> to get more bandwidth than the combined bandwidth used by
> DDoS attack and wear out the attacker.
DDoS attacks are not necessarily resource-starvation attacks;
even when they are, the resource being exhausted may not be bandwidth.
So this advice is pertinent only to the largest sub-sub-class of DDoS
attacks.
Where the attack is, in fact, an attempt to exhaust all available
bandwidth, it may be used via a botnet or other attack multiplier
such that purchasing sufficient bandwidth to exceed the attack becomes
cost-prohibitive.
David Gillett
[ reply ]