DDoS Flashcards
AWS DDoS Whitepaper location
https://d1.awsstatic.com/whitepapers/Security/DDoS_White_Paper.pdf
What does DDoS stand for?
Distributed denial of service
What is a DDoS attack?
An attempt to make a website or application unavailable to users.
Some methods used to achieve a DDoS
Large Packet floods, a combination of reflection and application techniques, or botnets.
What is a reflection attack?
a method of attacking a challenge-response authentication system that uses the same protocol in both directions.
What is an amplification attack?
An indirect attack where the attacker queries a reflector posing as the victim’s IP. The response is sent to the victim.
in information security, what is a “reflector”?
A server that is open to the public and will respond to queries.
What is a botnet?
A network of systems with specialized malware that carry out preprogrammed instructions those from a centralized command system.
How much bigger is a query response than the query itself?
28x - 54x larger
What is a layer 7 attack?
A flood of GET requests that overwhelm the server’s system resources.
What is a Slowloris attack?
An attack that targets an application’s maximum connection limit through opening, and keeping open, many connections.
Mitigate a DDoS attack - Method 1
Minimize the attack surface - Use application load balancing with firewall restrictions.
Mitigate a DDoS attack - Method 2
Be ready to absorb the attack with via automated scaling procedures ready.
Mitigate a DDoS attack - Method 3
Safegaurd exposed resources
Mitigate a DDoS attack - Method 4
Learn normal behavior - Know normal traffic behavior for your site to make identification easier.
Mitigate a DDoS attack - Method
Create a plan for attacks
What AWS service protects against DDoS attacks?
AWS Shield
What services does AWS Shield protect?
Elastic Load Balancing, CloudFront, Route 53
Which types of attacks does Shield protect against?
SYN/UDP floods, Reflection, and other Layer 3/4 attacks
True or False, AWS has an advanced, enterprise grade Shield service?
True. $3000/month
True or false, with AWS Shield Advanced, victims do not incur charges for initialized autoscaling groups resulted from DDoS attacks?
True. Advanced customers are “shielded” from additional costs as a result of DDoS attacks.
True or False: AWS has a dedicated support team for AWS Shield Advanced customers?
True
True or False: AWS Shield Advanced offers near real time notifications of DDoS attacks?
True
The AWS DDoS Response Team is available 8-5, 7 days a week for customers?
False. They are available 24x7
What are the AWS technologies that can be used to help mitigate a DDoS attack?
CloudFront Route 53 ELBs WAFs Autoscaling CloudWatch
