DDoS Attacks Leverage UPnP Protocol to Avoid Mitigation

Minimalist · May 15, 2018

Attackers are experimenting with a new method of avoiding some DDoS mitigation solutions by employing the Universal Plug and Play (UPnP) protocol to mask the source port of network packets sent during the DDoS flood.

In a report published on Monday, DDoS mitigation firm Imperva says it observed at least two DDoS attacks employing this technique.

By masking the origin port of incoming network packets, Imperva says that older DDoS mitigation systems that rely on reading this info to block attacks will need to be updated to more complex solutions that rely on deep packet inspection (DPI), a more costly and slower solution.
Click to expand...

https://www.bleepingcomputer.com/ne...s-leverage-upnp-protocol-to-avoid-mitigation/

guest · Jun 28, 2018

Those Harder to Mitigate UPnP-Powered DDoS Attacks Are Becoming a Reality
June 28, 2018
https://www.bleepingcomputer.com/ne...-powered-ddos-attacks-are-becoming-a-reality/

Security researchers are continuing to see DDoS attacks that leverage the UPnP features of home routers to alter network packets and make DDoS attacks harder to detect and mitigate with classic solutions.

The UPnP port masking technique is a new one and was first detailed last month by security researchers from Imperva.
UPnP port masking spreads from DNS and NTP to SSDP
Back then, Bleeping Computer anticipated that the tactic would become more popular among botnet authors. This premonition became true yesterday when in a report released by Arbor Networks, the company reported on seeing similar DDoS attacks that leveraged the UPnP protocol, but this time the technique was used to mask SSDP-based DDoS attacks.

SSDP DDoS attacks that would have been easily mitigated by blocking incoming packets that originated from port 1900 were harder to spot as most of the traffic came from random ports instead of one.
Click to expand...

Report: https://asert.arbornetworks.com/wp-content/uploads/2018/06/ssdp_diffraction.pdf

Log in or Sign up

DDoS Attacks Leverage UPnP Protocol to Avoid Mitigation

Minimalist Registered Member

guest Guest

Log in or Sign up

DDoS Attacks Leverage UPnP Protocol to Avoid Mitigation

Minimalist Registered Member

guest Guest

Useful Searches