Hackers using Web site operating system vulnerabilities and Web server SQL injection vulnerability and so on obtains the Web server control authority, light is tamper with the Web content, heavy then steal important internal data, more serious is exhausted Web server resources DDoS attack. It also makes more and more users begin to pay close attention to application layer DDoS problem.
According to huawei security ability center statistics, in view of the Web service accounts for 67.71% of the total attack packard bell easynote w3110 keyboard, mainly concentrated in SYN Flood, HTTP Get Flood, CC attack, retransmission attack, etc., Web service is still the main DDOS attack.
This kind of attack using application protocol's own design defect send elaborate structure application message, or through the application of intelligent interactive to run out of the system performance. Now vulnerable application server mainly concentrated in the HTTP, DNS, HTTPS and SIP. The famous SSL - DDoS attack is to constantly SSL key heavy consultation to depletion HTTPS server performance of a kind of attack.
Because this kind of attack sources tend to support the complete transport layer protocol stack, so to prevent attacks also put forward some more challenges.Take the popular CC attack for example, this kind of the attacker will often use some means to hide attack's puppet network or prevent attacks are easily recognition. Such as forge against the problems for IP network, the use of a large number of proxy server, random variation field, etc.
http://www.studentslistit.com/2013/02/27/commvault-issued-new-simpana-10/
/https%3A%2F%2Fassets.over-blog.com%2Ft%2Fcedistic%2Fcamera.png)