This is archived content, mostly untouched since 2003. For newer content/updated versions, see netfuture.ch/Publications.
First page Back Continue Last page Overview Text

Distributed Denial of Service. Conditions. Large numbers of. unwitting slaves. Fake source addresses. Countermeasure. Stop slaves. Way out. Identification of culprits. Slaves, Relays, Masters. Fixing problems. How to identify?. Probabilistic packet marking does not work.

Notes:


In DDoS, we have a single bad guy or a small group of people that previously hacked into a large amount of other systems or found other ways to turn them into willing slaves. These slaves will then create traffic targeted at victims.
Here is the other reason that IP traceeback is named as "rumors" in the title.