분야
pptxⅡ. Nong-Hyup Case
Status & Trends DDoS Attack In Korea
First DDoS attack is occurred in 2006
Increase of target systems
- Small Websites Major Websites(Bank, Portal, …)
Increase of a ransom DDoS
Increase of Application-layer DDos attack (Above 50%)
- HTTP Get flooding, Slowloris, SIP flooding
- Network Bandwidth Consumption System Resource Consumption
Hard to detect and block App.-layer DDos attack
- Because Each Zombie PC generates small traffic, Hard to detect by legacy security solution.
Lapse
April 12, 2011 - Network system paralysis
13 - Count work is restored
14 - Other functions are restored
22 - Some transactions are not recoverable
May3 - Investigation results are released
