|
|
[ Message Precedent sur la mailing][ Message Suivant sur la mailing][ Precedent dans le fil][ Prochain dans le fil][ Index par Date][ Index par fil]
Re: [Full-disclosure] Ubisoft DDoS
On Mar 9, 2010, at 11:01 PM, <Valdis.Kletnieks@xxxxxx> wrote:
> Oh, I didn't say they didn't exist.
A good way to get started w/scalable DDoS mitigation is to implement S/RTBH on one's hardware-based edge routers, and then make use of open-source NetFlow tools for visibility.
There are commercial solutions as well - in the interests of full disclosure (pardon the pun, heh), I work for a vendor of such intelligent DDoS mitigation (IDMS) solutions.
These slides may be of interest in hardening/leveraging one's network infrastructure and gaining the ability to detect/classify/traceback/mitigate DDoS:
<link://[click]>
<link://[click]>
<link://[click]>
<link://[click]>
There was also a relevant talk at the latest NANOG (a synopsis of discussions on nanog-l and cisco-nsp):
<link://[click]>
and other relevant presentations at various NANOGs in the past.
To answer the previous respondent's question, Cisco acquired Riverhead and its Guard in early 2004:
<link://[click]>
I also highly recommend this book by Dave Smith and Gregg Schudel of Cisco - it's the best (and only!) book on real-world opsec out there, available in dead-tree, Kindle, and Adobe Reader formats:
<link://[click]>
[Full disclosure again; I'm cited in the book, but received and continue to receive no renumeration of any kind due to same.]
But before going the commercial route, folks should work on hardening their hosts/OSes/apps and leveraging their existing infrastructure and open-source as noted in the presentations above - in many cases, this is all that's needed, as outlined here:
<link://[click]>
-----------------------------------------------------------------------
Roland Dobbins <rdobbins@xxxxxxxxx> // <link://[click]>
Injustice is relatively easy to bear; what stings is justice.
-- H.L. Mencken
Full-Disclosure - We believe in it.
Charter: link://[click]
Hosted and sponsored by Secunia - link://[click]
Archives de la liste de diffusion Secunia
Archives de la liste de diffusion Full Disclosure
| Mini-Tagwall des articles publiés sur SecuObs : | | | | sécurité, exploit, windows, attaque, outil, microsoft, réseau, audit, metasploit, vulnérabilité, système, virus, internet, usbsploit, données, source, linux, protocol, présentation, scanne, réseaux, scanner, bluetooth, conférence, reverse, shell, meterpreter, vista, rootkit, détection, mobile, security, malicieux, engineering, téléphone, paquet, trames, https, noyau, utilisant, intel, wishmaster, google, sysun, libre |
| Mini-Tagwall de l'annuaire video : | | | | curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit, exploit, lockpicking, linux, attack, wireshark, vmware, rootkit, conference, network, shmoocon, backtrack, virus, conficker, elcom, etter, elcomsoft, server, meterpreter, openvpn, ettercap, openbs, iphone, shell, openbsd, iptables, securitytube, deepsec, source, office, systm, openssh, radio |
| Mini-Tagwall des articles de la revue de presse : | | | | security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité |
| Mini-Tagwall des Tweets de la revue Twitter : | | | | security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack |
|
|
|
|
|
