24 April 2014
De Vere Wokefield Park
Europe/London timezone

DDoS Forensics

24 Apr 2014, 11:15
30m
De Vere Wokefield Park

De Vere Wokefield Park

Goodboys Lane Mortimer Reading Berkshire RG7 3AH
Main Session

Speaker

Mr Curon Davies (Jisc RSC Wales)

Description

As a result of daily attacks against a Further Education College in Wales, a connection was noticed between changing DNS entries and the attacked IP address. Using innovative DNS responses inspired by GeoDNS and logging all requests to the authoritative server, it has been possible to trace the source of DDoS and spoofed flood attacks.

Primary author

Mr Curon Davies (Jisc RSC Wales)

Presentation Materials