Service exhaustion floods — HTTP/HTTPS flood, HTTP pipelining, and SSL renegotiation DDoS attack
Guest Post: Learn about three different types of DDoS attacks and how to defend against them.
Tag: HTTP
Browser-powered desync attacks: A new frontier in HTTP request smuggling
Guest Post: The vulnerabilities that led to the discovery of browser-powered desync attacks.
Internet Edge IP SLA deep dive
Guest Post: The Internet Protocol Service Level Agreement feature can help monitor the reliability of your ISP’s service.
Identifying unexpected Internet services
Guest Post: Study finds that TCP SYN-ACK is not an accurate indicator of service presence because of middlebox responses.
Notes from RIPE 83
Geoff Huston discusses technical presentations from RIPE 83.
More notes from IETF 111
Geoff Huston discusses currently active IETF areas that are not DNS related.
Programmatically analyse packet captures with GoPacket
Guest Post: How to build a Golang custom packet processor using the GoPacket library to passively watch API traffic.
Limitless HTTP in an HTTPS World
Guest Post: Researchers have been able to identify underlying HTTP features by observing HTTPS connections.
Discovering evasive code in malicious websites
Guest Post: NTT Secure Platform Laboratories has discovered five previously unknown evasion techniques by using two types of honeyclients.
Positive signs for TLS adoption in Japan
Guest Post: A study looking at TLS adoption in Japan finds HTTPS web traffic has increased by a factor of 14 in the last 10 years.