The name GET flood is used for two different kinds of attacks using the same request. The attacker can either request static URLs at a high rate, or simply ask for every single object on a website, one after the other.

A global namespace is a federation of file systems from any number of file storage devices, such as servers using NFS (network file system), CIFS (common Internet file system), NAS (network-attached storage), or file servers. A global namespace is an important mechanism for managing distributed file storage, allowing access to file data regardless of physical location.

A common algorithm is used for the dictionary tables of all the major web service platforms (Java, ASP.NET, and Apache). In late 2011 a clever attack was released that took advantage of the ubiquity of this hashing algorithm. By sending a single POST message filled with thousands of variables, the hashing function would overload and […]

An ICMP request requires the server to process the request and respond, so it takes CPU resources. Attacks on the ICMP protocol, including smurf attacks, ICMP floods, and ping floods take advantage of this by inundating the server with ICMP requests without waiting for the response. This attack seeks to overwhelm the server’s ability to […]

Endpoint security is a strategy for ensuring that a client device does not present a security risk before it is granted a remote-access connection to the network.

TLS and SSL are the standard protocols used for securing stream-based TCP Internet traffic. DTLS is a protocol based on TLS that is capable of securing the datagram transport. DTLS is well-suited for securing applications and services that are delay-sensitive (and hence use datagram transport), tunneling applications such as VPNs, and applications that tend to […]

DNS servers provide the roadmap to the Internet, and help clients find the servers they are looking for. A DNS query flood uses a network of clients to target a single server with floods of valid requests.

The roadmap to every single computer on the Internet is held in DNS servers. The DNS NXDOMAIN flood attack attempts to make servers disappear from the Internet by making it impossible for clients to access the roadmap.

The DMZ, or demilitarized zone, is a portion of an enterprise network that sits behind a firewall but outside of or segmented from the internal network. The DMZ typically hosts public services, such as Web, mail, and domain servers. Application delivery controllers usually sit in the DMZ, providing application access to the public servers.