It's been said that Domain Name System based Distributed Denial of Service attacks are still a large issue for the internet. So, to better analyze and understand the issue I ran a large network of DNS Honeypots on the internet for a year. Their mission? To do one thing, watch when they become part of a DDoS Attack. Together, we'll overview what a DDoS attack is, and how a DNS amplification based attack works. We'll go through what my distributed network looked like, what it cost, and how it was created. Then, we'll break down how my servers have been abused by malicious actors to make them part of the DDoS problem.

Things I like: RFC1034, RFC1035, MacOS, BSD, Topre Switches, a good Alfredo, and network security. Things I dislike: Open DNS Resolvers.

Back to BSides Columbus Ohio 2019 video list