Denial Of services

transcript

Ahmad Muammar W. K.http://google.com/search?q=y3dips

http://google.com/search?q=y3dips

DOSTypesSimulationInternet WormDDOSDiscussion

Details

A denial-of-service attack is an attack on a computer system or network that causes a loss of service to users

MotivesMoneyRevengePrestigeGaining AccessPolitic

DOS HistoryClassical DOS Internet WormsDdos

Classical DOSApplication BugConsumption of computational resourcesDisabling web trafficMail bombing

TCP syn floodICMP/UDP/ECHO (ping) to broadcast addresses ( SMURF)Out of Band (oob) Attack (winnuke:139) ARP poisoningPing of Death (win95)Port flooding Mail bombing

Some Examples/Types

Mass Spamming?A Real Life ExampleUsing SMTPEasy Proof Of concept

Reply to : victim@dudul.com

Sender : anonymous@fvck.com

To : xxx@multiple server

Received : victim@dudul.com

Mail Server A

Mail Server B

Mail Server C

$recipient = “xxx@multiple mailserver";

$subject = “fake";

$mailheaders = "From: victim@dudul.com \n";

$mailheaders .= "Reply-To: victim@dudul.com\n";

$msg= "\nIts a spam\n";

mail($recipient, $subject, $msg, $mailheaders) or die (“tidak terkirim!");

ApplicationServicesSystem

CPUMemoryRamNetworking

DDOS against

DDos Against IEInternet Explorer is Microsoft Windows Web browserSome Version has hole in XML scriptError in Application

<table>

<v:X style="HEIGHT:1"></td></tr>

</table>

Apache is a free web server Some Version vulnerable to this kind of DosServer temporary down

DDos Against Apache

Limited ResourcesMultiple ProcessSome Infinite loop wouls suck more resources

DDos Against cpu, memory, ram

Flooding the networkCut all trafficFill the bandwidth

DDos Against Network

WormA computer program which replicates itself and is self-propagating. Worms, as opposed to viruses, are meant to spawn in network environments.

WormActive propagated itself Combine With sytem/application hole Ddos Agent/zombie

web traffic flooding

Mass war machine

Resources Take Over

Distributed AttackMultiple ImpactZombie/Agent

Any types of Dos ttack

Single user Target

Attacker

zombie

zombiezombie

zombie

Target

Survive (mitigate Ddos)Network ConfigurationChange IP AddressStrong peripheral

Filtering Technique (signatures of the traffic)Some Mirror/Backup

Denial Of services

Economy & Finance