Asked 11 years, 10 months ago. Active 11 years, 7 months ago. Viewed 34k times. Improve this question. Add a comment. Active Oldest Votes. The short answer is, "until it stops". Improve this answer. Cyril Gupta Cyril Gupta 1 1 silver badge 8 8 bronze badges. Funny thing happened me once. I had one colo customer dos another colo customer, mbit worth of traffic from one rack to the neighbouring rack.
Bad attitude. Of course there are things that can be done and generally they're not handled be the person being targetted. How can I find who attacked me? To identify who might have attacked your console or your computer, contact your ISP.
Can Xbox Support identify my attacker? To try to identify your attacker, contact your ISP. Did this resolve the issue? Yes No. Still need help? Request a call, chat online, and more. Was it targeted at your entire network, or did it target specific servers or services?
What were the attack characteristics? Was it a single sustained flood , or did it employ sophisticated attack methods such as multi-vector attacks, dynamic IP spoofing , or burst attacks? What attack protocols and patterns were used? What was the peak amount of network traffic, both in terms of data bits per second as well as requests connections per seconds?
Did the attack impact the network layer, or also the application layer? Did the attack include encrypted traffic or protocols? How long did the attack last? Getting this information will help you get a full picture of what happened. Assess Damages Apart from analyzing the attack itself, you need to understand how it impacted you. Which services were impacted, to what extent, and for how long?
What were the direct monetary damages i. Were there any indirect damages, such as bad press, damage to reputation, customer complaints, etc.? Did users experience any impact as a result of the attack, either as a result of the attack itself, or as a result of defensive measures false positives? Identify Weak Spots The next step after identifying damages is to identify any weak spots in your defense — that is, why was attack traffic able to get through?
While such a solution might stop similar future assaults, the successful first wave is usually enough to cause hours of downtime and other issues. Moreover, perpetrators can easily modify their methods, attacking from disparate sources and using different vectors. This keeps your organization in a defensive position, where it has to repeatedly deploy additional configurations, while simultaneously attempting to recover from multiple downtime events.
This can go on for days at a time. With most assaults registering over 10Gbps and few organizations having more than a 10Gbps burst uplink, the DIY solution is almost always doomed to fail. The on-premise approach to DDoS protection uses hardware appliances deployed inside a network, placed in front of protected servers.
Such appliances usually have advanced traffic filtering capabilities armed with a combination of geo-blocking, rate limiting, IP reputation and signature identification. Typical mitigation appliances can be effectively used to filter out malicious incoming traffic.
This makes them a viable option for stopping application layer attacks. Register Now. Off-premise solutions are either ISP-provided or cloud-based. ISPs typically offer only network layer protection, while cloud-based solutions provide additional filtering capabilities required to stop application layer attacks. Generally, off-premise mitigation solutions are managed services. Off-premise solutions are deployed either as an on-demand or always-on service, with most market-leading vendors offering both options.
0コメント