Everyone, and welcome to the kapiloff schools.
Now, in today's lecture, we're going to speak about a very interesting topic, which I'm sure most
of you will really like it, which is called Is There Denial-of-service?
So one thing that I am sure that many of you might have already heard about denial-of-service and how
many of the big websites are going down because of the denial of service attacks.
So let's understand the basics of for denial of service attacks are all about.
And then we'll go ahead with that interesting practicals as well.
So in a normal website operation, generally there is something called the normal traffic.
So if this is a website of website can handle a specific amount of traffic so it can be 10 requests
per second or it can be 100 requests per second depending upon the server capacity.
So in the normal scenario, you see the server is all happy.
So it is in green where there is a normal traffic 13 times there can be a high traffic where the server
resources becomes really busy and the application of the website becomes to be quite slow.
However, still the website is operational.
So the about to use cases you will find to be a very genuine one.
But certain times what a -- tries to do is they try to generate intentionally this malicious high
traffic with a sole intention to bring the server down.
So if you see oil in the third use case, you have a denial of service where a single attacker is generating
a lot of requests in such a way that this server is completely down.
Now there is one more attack distributed denial of service where there are multiple parties doing a
denial of service attack on this same resource.
So one of the difference between the U.S. and the U.S. is that in the U.S. there can be maybe one user
who is attacking the server.
However, in the U.S., there will be hundreds of users across the world who are attacking the same
end point at the instant of time.
And that is why this call is the distributed denial of service attacks.
So the those and the U.S. are basically part and parcel of the servers and then networks life.
Now, the reason why these attacks are so successful is because it is very easy to Launceston.
And along with that, when you go and inquire about the protection, if you are a system administrator,
you will be presented with a big bill that you might have to pay if you really need the U.S. protection.
However, many of the cloud providers like A.W. as they're coming with a good services like AWG, which
can help you protect against the civil service attack to a certain extent.
So nowadays the U.S. attacks are going very, very big.
So if you talk about 2016 itself, it is like two years back.
You had deduces of 800 TBP, as you can imagine, 800 divi per second.
Lot of traffic.
It can actually bring the biggest of the websites down.
So let me actually show you in practical light on how exactly the U.S. attack would really look like.
So on the left hand side, I have my Windows machine, and if you look into the CPU utilization, it
is at three percent.
So I have a code A7 and it is at three percent of utilization now after I performed a denial of service
attack.
You will see the C.P.U event 200 percent instantly.
So from three percent to 100 percent within just a few seconds of those attacks.
So let's not waste time and let me show you and how exactly it would really look like.
So first.
I have a Windows 10, my SHINOMIYA, and if you look into the CPU utilization, not much quite empty,
around eight percent, 78 percent of the utilization.
Now on the right hand side, I have a Linux machine and this is a very from will be putting the DOS
attacks from.
So let's start.
So just notice the zip utilization is quite low, three percent right now.
Now within the calendar next, there is a great tool called.
Like, so Lloyd is one of the tools which can perform the denial of service attacks.
So the first thing that you have to put is either you need to put the warrant or you need to put the
IP address of the end point, which you want to attack.
So in my case, I put the IP address of the endpoint.
So 192 168 dot nine Jugulator.
So this is the IP address of my windows.
Machine now there can be various attack vectors that you can use depending upon the firewall and the
application which is running, so for my case, I will be using UDP based attack vector and.
Let's start so you can put the first thing you have to do, just log on to the target and just press
the I'm charging the laser now.
You see, the amount of requests which is being sent by this light is amazingly fast.
And note that this virtual machine only has around two, Ghofran.
So we're going to give you a different look at the requests that are going now.
If I go to the window server now, you see the CPU utilization is actually going to a very high spike
rate.
So I don't.
Eighty nine percent and after a minute or two, the CPU utilization will be spiked to 100 percent full.
And this is the power of denial of service attack.
See if you're already eating 89 percent anyway.
So when I just press stop flooding, let's count the request.
I am sure we will do so.
Unit dense.
Hundred thousand.
Ten thousand.
And so I don't 13 lack request, which was sent within just one minute from Earth to give them virtual
machine.
So imagine what would happen if you launch this attack vector from a 16 GB ram server.
The amount of requests that will be reached will be tremendously fast and it can actually bring down
a lot of networks and lot of websites.
And it is so coming back to our PowerPoint presentation, I hope you understood what their denial of
service attack is all about.
So the practical that we need right now, it was for the denial of service because there was a single
entity.
You also have distributed denial of service where there are multiple users who might run Loike Tool,
which we just had, and now the common endpoint.
So that is a difference between a Dorson that leaders and deadly attacks are again pretty common.
It has actually bring down brought down Twitter, brought on a lot of functionality of Facebook, PayPal
and various others.
So this is the overview about what DOS and deduce what attacks really look like.
I hope this has been informative for you.
And if you have any questions those suggestions, feel free to connect us, Twitter, Facebook, Willingdon
or the preferred way, as well as that instructor's Ateret Kapiloff today.
Thanks for watching.