Internet vulnerability found by the Cyber Academy researchers reported as significant threat by cyber report

24/07/2016

News image

Outline

Researchers in The Cyber Academy reported on a new reflection attack on the attack in a recent research paper [here]. It is now being reported on within Akamai's State of Internet report:

https://www.akamai.com/uk/en/multimedia/documents/state-of-the-internet/trivial-file-transfer-protocol-reflection-ddos-threat-advisory.pdf

Akamai Technologies provides content to the Internet, and is responsible for around 30% of all Web traffic. They thus have their finger on the pulse of the Internet, and have servers all over the world, providing fast content delivery to the requests. There is a good chance that you're receiving this page via one of Akamai's servers. So, basically if a user in Japan wants to access Facebook, then Akamai is likely to provide them with the page, located in their country.

Recently Akamai Technologies  announced that Distributed Denial of Service attacks are the most worrying at the present time, and their level of sophistication increases by the day. They have even recently monitored a sustained attack of 363Gbps (57 million packets per second) against a media outlet. This is the type of attack which few companies, let alone a nation-state, could cope with for a sustained period. This main focus is the reflection attack, where valid servers are used to generate large amounts of traffic, and one the protocol which is most often used is DNS.

Prof Bill Buchanan outlines that, "Many of the protocols used on the Internet are old and not really designed with security in mind. Our work found a significant weakness in the TFTP protocol, and which is being used in many networked infastructures."

Richard Macfarlane added, "It is clear that Distributed Denial of Service attacks are increasing, and our work showcases how badly designed the protocols some of the existing protocol are."


 
[Read More]

Associated people

William Buchanan
Director of CDCS
w.buchanan@napier.ac.uk
+44 131 455 2759
Richard Macfarlane
Lecturer
r.macfarlane@napier.ac.uk
+44 131 455 2335
Cyber-Security
Electronic information now plays a vital role in almost every aspect of our daily lives. So the need for a secure and trustworthy online infrastructure is more important than ever. without it, not only the growth of the internet but our personal interactions and the economy itself could be at risk.

Resources