Largest DDoS Attack to Date
文章描述了一次7.3 Tbps的DDoS攻击,主要通过UDP协议进行。UDP因其无需握手、传输速度快而被滥用。攻击者向目标IP发送大量数据包至随机或特定端口,导致目标系统资源耗尽,无法处理正常流量。 2025-6-23 11:4:52 Author: www.schneier.com(查看原文) 阅读量:17 收藏

It was a recently unimaginable 7.3 Tbps:

The vast majority of the attack was delivered in the form of User Datagram Protocol packets. Legitimate UDP-based transmissions are used in especially time-sensitive communications, such as those for video playback, gaming applications, and DNS lookups. It speeds up communications by not formally establishing a connection before data is transferred. Unlike the more common Transmission Control Protocol, UDP doesn’t wait for a connection between two computers to be established through a handshake and doesn’t check whether data is properly received by the other party. Instead, it immediately sends data from one machine to another.

UDP flood attacks send extremely high volumes of packets to random or specific ports on the target IP. Such floods can saturate the target’s Internet link or overwhelm internal resources with more packets than they can handle.

Since UDP doesn’t require a handshake, attackers can use it to flood a targeted server with torrents of traffic without first obtaining the server’s permission to begin the transmission. UDP floods typically send large numbers of datagrams to multiple ports on the target system. The target system, in turn, must send an equal number of data packets back to indicate the ports aren’t reachable. Eventually, the target system buckles under the strain, resulting in legitimate traffic being denied.

Tags: ,

Posted on June 23, 2025 at 7:04 AM0 Comments

Sidebar photo of Bruce Schneier by Joe MacInnis.


文章来源: https://www.schneier.com/blog/archives/2025/06/largest-ddos-attack-to-date.html
如有侵权请联系:admin#unsafe.sh