24 April 2014
De Vere Wokefield Park
Europe/London timezone

DDoS Forensics

24 Apr 2014, 11:15
De Vere Wokefield Park

De Vere Wokefield Park

Goodboys Lane Mortimer Reading Berkshire RG7 3AH
Main Session


Mr Curon Davies (Jisc RSC Wales)


As a result of daily attacks against a Further Education College in Wales, a connection was noticed between changing DNS entries and the attacked IP address. Using innovative DNS responses inspired by GeoDNS and logging all requests to the authoritative server, it has been possible to trace the source of DDoS and spoofed flood attacks.

Primary author

Mr Curon Davies (Jisc RSC Wales)

Presentation Materials