The rising tide: DDoS from defective designs and defaults

Authors:
Richard Clayton
Affiliations:
University of Cambridge, Computer Laboratory, Cambridge, United Kingdom
Venue:
SRUTI'06 Proceedings of the 2nd conference on Steps to Reducing Unwanted Traffic on the Internet - Volume 2
Year:
2006

Citing 2
Cited 1

An analysis of wide-area name server traffic: a study of the Internet Domain Name System

SIGCOMM '92 Conference proceedings on Communications architectures & protocols
Experiences Deploying a Large-Scale Emergent Network

IPTPS '01 Revised Papers from the First International Workshop on Peer-to-Peer Systems

Accountability as a service

SRUTI'07 Proceedings of the 3rd USENIX workshop on Steps to reducing unwanted traffic on the internet

Quantified Score

Hi-index	0.00

Visualization

Abstract

We consider the phenomenon of distributed denial of service attacks that occur through design defects (and poorly chosen defaults) in legitimately operated, entirely secure systems. Particular reference is made to a recently discovered "attack" on stratum 1 Network Time Protocol servers by routers manufactured by D-Link for the consumer market, the latest example of incidents that stretch back for decades. Consideration is given to how these attacks might have been avoided, and why such failures continue to occur.