水坑攻擊: APT 和網絡罪犯如何滲透安全基礎設施
我第一次接觸網絡罪犯的世界是在很多年前通過一個水洞攻擊活動. 我訪問了一個波斯語網站，發現它正在向訪客下載惡意軟件’ 瀏覽器. 我立即聯絡了網站管理員, 他們告訴我他們對這個問題沒有技術知識. 很明顯…
閱讀更多
憑證填充不是 DDoS!
I have heard this many times over the course of the last several years: someone is experiencing a heavy DDoS attack on their website. When I ask them what type of attack they are experiencing, the answer is usually that the bad guys are sending them thousands or even millions of POST requests. When I…
閱讀更多
Application layer DDoS attacks, and how they can be mitigated
DDoS (distributed denial of service) and DoS (denial of service) attacks can be broadly classified into three categories based on the layers of the OSI model they target: network layer (Layer 3), transport layer (Layer 4), and application layer (Layer 7). Layer 3 and Layer 4 attacks are typically less complex–even though that they might…
閱讀更多