DDoS Armageddon!?! 12-04-2012, 09:48 PM
#1
Even as distributed denial of service (DDoS) attacks are becoming larger and more complex, the possibility of an attack big enough to take down the entire Internet remains unlikely, security experts say.
The specter of a “DDoS Armageddon” was raised by Arbor Networks earlier this week as part of an analysis of how attacks are bigger and lasting longer. It is possible to have a DDoS attack so large that it could overwhelm the targeted organization as well as all the Internet providers in between, Carlos Morales, a researcher with Arbor Networks, wrote in a blog post recently. There have been plenty of DDoS attacks capable of overwhelming a 10 Gbps data center since 2005, and there have been recent attacks that exceeded 100 Gbps in size, said Morales.
The largest bandwidth attacks measured in 2011 and 2012 were 101.4 Gbps and 100.8 Gbps, respectively, according to anonymous attack statistics collected from Arbor Peakflow SP systems deployed around the world as part of by the Arbor Networks ATLAS system.
“Is there an Armageddon attack on the horizon that threatens to take down the entire Internet? There are indications that this could be the case,” Morales wrote.
If several large botnets joined forces to target several organizations in a DDoS attack of approximately 1 Tbps in size, they would overwhelm the organization and also the service providers, Morales said. Even though service providers generally have a lot of bandwidth to soak up attack traffic, “there are limits to how much traffic they can handle,” Morales said. Attacks of this magnitude could cause bottlenecks in many places simultaneously, leading to a situation where even large tier service providers are unable to handle the traffic.
While a scary prospect, some security experts weren’t convinced.
“DDoS Armageddon would require every computer and smartphone on the Internet to be attacking everyone else. This just is not going to happen,” Dave Jevans, founder and CTO of Marble Cloud told SecurityWeek.
Getting a botnet big enough to launch a 1 Tbps attack, let alone several of them, would be a challenge. Arbor’s Morales estimated that a million-member botnet could generate a 1 Tbps attack provided each compromised host has an average of 1 Mbps upstream access. That math doesn’t quite work, because bandwidth addition doesn’t work that way, Any Ellis, CSO of Akamai Technologies, told SecurityWeek.
More information at http://anonymousnews.blogs.ru/ as well as more anonymous news such as PROJECT MAYHEM!
The specter of a “DDoS Armageddon” was raised by Arbor Networks earlier this week as part of an analysis of how attacks are bigger and lasting longer. It is possible to have a DDoS attack so large that it could overwhelm the targeted organization as well as all the Internet providers in between, Carlos Morales, a researcher with Arbor Networks, wrote in a blog post recently. There have been plenty of DDoS attacks capable of overwhelming a 10 Gbps data center since 2005, and there have been recent attacks that exceeded 100 Gbps in size, said Morales.
The largest bandwidth attacks measured in 2011 and 2012 were 101.4 Gbps and 100.8 Gbps, respectively, according to anonymous attack statistics collected from Arbor Peakflow SP systems deployed around the world as part of by the Arbor Networks ATLAS system.
“Is there an Armageddon attack on the horizon that threatens to take down the entire Internet? There are indications that this could be the case,” Morales wrote.
If several large botnets joined forces to target several organizations in a DDoS attack of approximately 1 Tbps in size, they would overwhelm the organization and also the service providers, Morales said. Even though service providers generally have a lot of bandwidth to soak up attack traffic, “there are limits to how much traffic they can handle,” Morales said. Attacks of this magnitude could cause bottlenecks in many places simultaneously, leading to a situation where even large tier service providers are unable to handle the traffic.
While a scary prospect, some security experts weren’t convinced.
“DDoS Armageddon would require every computer and smartphone on the Internet to be attacking everyone else. This just is not going to happen,” Dave Jevans, founder and CTO of Marble Cloud told SecurityWeek.
Getting a botnet big enough to launch a 1 Tbps attack, let alone several of them, would be a challenge. Arbor’s Morales estimated that a million-member botnet could generate a 1 Tbps attack provided each compromised host has an average of 1 Mbps upstream access. That math doesn’t quite work, because bandwidth addition doesn’t work that way, Any Ellis, CSO of Akamai Technologies, told SecurityWeek.
More information at http://anonymousnews.blogs.ru/ as well as more anonymous news such as PROJECT MAYHEM!
![[Image: sign.jpg]](http://i1279.photobucket.com/albums/y534/Linked_in/sign.jpg)
A Proud Father and Supporter of the AF Radio!