Security threats Toolkit
Story: Mitigating the effects of a DDoS attack
a rather manual approach?
Good stuff in the article, but I can't help feeling that the approach is a little manual and therefore not suitable for businesses beyond a certain size.
Cisco currently provides an effective hardware 'solution', which uses multiple algorithms to assess in real time incoming packets and selectively drops the ones that are suspect.
http://www.cisco.com/en/US/products/ps5888/index.html
Having said that, the whole area of DDoS protection requires much more research and development, and a willingness (compulsion?) of ISPs to participate more actively in the process. This will come once the whole process of remediation becomes more automated.
Full Talkback thread









