You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

SSAC Advisory on DDoS Attacks Leveraging DNS Infrastructure (R-4)

Date IssuedDocumentReference IDCurrent Phase

  

SSAC Advisory on DDoS Attacks Leveraging DNS Infrastructure (R-4)SAC065

CLOSED


Description:

Authoritative DNS server operators should investigate deploying authoritative response rate limiting. This involves:

a. Investigate mechanisms to deter DNS amplification attacks (e.g., Response Rate Limiting (RRL) in DNS server software), and implement those that are appropriate for their environment;

b. Encourage DNS software vendors to provide such capabilities; and

c. Frequently review the state of the art of such mechanisms and update their environment as necessary.


STATUS UPDATES

DatePhaseTypeStatus Updates




  • No labels