Honeypot-based Monitoring of Amplification DDoS Attacks
• 5 min read
Amplification DDoS attacks are one of the most prevalent forms of denial-of-service attacks. The SISSDEN project (sissden.eu) operates a network of honeypots designed to detect these attacks, observing 10,000 per day.
“Hi, Nice work! Do you have the numbers of attack per day and per honeypot? Are the number of attacks observed by each honeypot nearly the same or have a high variation? Thanks.”
Thanks. Yes, we do keep the numbers of attacks per day (and per honeypot as well). So far the number of attacks observed has been nearly the same over all honeypots. Interestingly though, not all attacks are observed by all honeypots. Then again our honeypots only constitute a small fraction of all potential amplifiers out there, so some variation is to be expected.
Showing 1 comment(s)