Domnatio ad bestias: Crowd-filter as a panacea for DDoS (PHDays 2014)
-
Upload
denis-makrushin -
Category
Technology
-
view
105 -
download
0
description
Transcript of Domnatio ad bestias: Crowd-filter as a panacea for DDoS (PHDays 2014)
![Page 1: Domnatio ad bestias: Crowd-filter as a panacea for DDoS (PHDays 2014)](https://reader031.fdocuments.net/reader031/viewer/2022013101/557f65dfd8b42af1298b48ba/html5/thumbnails/1.jpg)
DAMNATIO AD BESTIASCrowd-filter as a panacea for DDoS
Denis Makrushin (@difezza)http://defec.ru/
Denis Makrushin (@difezza)http://defec.ru/
![Page 2: Domnatio ad bestias: Crowd-filter as a panacea for DDoS (PHDays 2014)](https://reader031.fdocuments.net/reader031/viewer/2022013101/557f65dfd8b42af1298b48ba/html5/thumbnails/2.jpg)
2
It was like that
![Page 3: Domnatio ad bestias: Crowd-filter as a panacea for DDoS (PHDays 2014)](https://reader031.fdocuments.net/reader031/viewer/2022013101/557f65dfd8b42af1298b48ba/html5/thumbnails/3.jpg)
3
Nowadays: amplify it!
SaaS Amplification
![Page 4: Domnatio ad bestias: Crowd-filter as a panacea for DDoS (PHDays 2014)](https://reader031.fdocuments.net/reader031/viewer/2022013101/557f65dfd8b42af1298b48ba/html5/thumbnails/4.jpg)
4
«The world is not enough»
• “Narrow neck” effect• “Friendship” with service
providers• Limited resources
• Advanced filtration system… but the limited resources
• Neural Networks and Intelligence, but the limited resources
• A lot of resources, but the limited resources
![Page 5: Domnatio ad bestias: Crowd-filter as a panacea for DDoS (PHDays 2014)](https://reader031.fdocuments.net/reader031/viewer/2022013101/557f65dfd8b42af1298b48ba/html5/thumbnails/5.jpg)
Point of (no)return
5
Route it via routers pool Common AddressRedundancy Protocol
![Page 6: Domnatio ad bestias: Crowd-filter as a panacea for DDoS (PHDays 2014)](https://reader031.fdocuments.net/reader031/viewer/2022013101/557f65dfd8b42af1298b48ba/html5/thumbnails/6.jpg)
Crowd-filter
6
• Hybrid P2P (routing node and filtration node)
• Traffic filtering based on the node’s characteristics
• Route optimization for content transferring
![Page 7: Domnatio ad bestias: Crowd-filter as a panacea for DDoS (PHDays 2014)](https://reader031.fdocuments.net/reader031/viewer/2022013101/557f65dfd8b42af1298b48ba/html5/thumbnails/7.jpg)
7
“Creating of new ideas it’s quite simple:enough to know how to mix the obvious and the impossible.”
Pieter Hein
![Page 8: Domnatio ad bestias: Crowd-filter as a panacea for DDoS (PHDays 2014)](https://reader031.fdocuments.net/reader031/viewer/2022013101/557f65dfd8b42af1298b48ba/html5/thumbnails/8.jpg)
The obvious
8
![Page 9: Domnatio ad bestias: Crowd-filter as a panacea for DDoS (PHDays 2014)](https://reader031.fdocuments.net/reader031/viewer/2022013101/557f65dfd8b42af1298b48ba/html5/thumbnails/9.jpg)
The impossible
9