Open Source Incidents
0 likes652 views
The document discusses the prevalence of DDoS attacks, highlighting that they accounted for 28% of all cyber attacks in 2013. It includes a demonstration of the Shellshock exploit and provides commands for implementing a protection signature in DefensePro. Additionally, it mentions the availability of affordable DDoS tools that can be easily accessed and utilized to launch significant attacks.
Related topics:1 of 10
Download to read offline
More Related Content
What's hot (20)
Ad
Viewers also liked (9)
Ad
Similar to Open Source Incidents (20)
More from Cybera Inc. (20)
Recently uploaded (20)
Open Source Incidents
- 1. Open Source Incidents David Hobbs Director of Security Solutions Emergency Response Team DavidH@Radware.com September 2014 Radware Confidential September 2014
- 2. DDoS is the Most Common Cyber Attack 2 28% attack of all cyber attacks in 2013 involved a DDoS Source: 2013 Cyber A1acks Trends, Hackmagedon
- 3. 2013 Attack Motivation - ERT Survey Radware Confidential Jan 2012 Slide 3
- 4. DDoS Ring of Fire 4
- 5. The Network Topology and DDoS Attacks Server components that are likely to be a1acked by DDoS A1acks 5c
- 6. What are we talking about? 6
- 8. Bash Exploit • This still works with the latest bash update • (X='() { (a)=>' bash -c "echo ls /etc; cat echo") • As does this: • env X="() { :;} ; echo busted" /bin/sh -c "echo stuff” • The following commands will implement a signature in ‘Report Only’ mode in our DefensePro. • • dp signatures-protection filter basic-filters user create ERT-bash2-CVE-2014-6271 -p tcp -c x28x29x20x7b -ct "Normalized URL" -ce "Case Sensitive" -dp http • dp signatures-protection filter advanced-filters user create group_ERT-bash2- CVE-2014-6271 ERT-bash2-CVE-2014-6271 • dp signatures-protection attacks user create 0 -n ERT-bash2-CVE-2014-6271 -f group_ERT-bash2-CVE-2014-6271 -am 0 • dp update-policies set 1 • • The customer should carefully inspect false positive rates of this signature and only afterwards to move it to ‘Block and Report’ mode. Slide 8
- 9. Booter DDOS Tools are Cheep Slide 9 h"p://ragebooter.net/members/plans Can be run from any device anywhere - Can be used to create huge dos floods, and more!
- 10. Thank You www.radware.com Radware Confidential Jan 2012