There are three types of DDoS attacks. Below is a good table that summarizes them:
| Volumetric Attacks |
Protocol Attacks |
Application Attacks |
| What is it? |
Attacks that use massive amount of traffic saturating the bandwidth of the target. Volumetric attacks are easy to generate by employing simple amplification techniques. |
Attacks that render a target in-accessible by exploiting a weakness in the Layer 3 and Layer 4 protocol stack. |
Attacks that exploit a weakness in the Layer 7 protocol stack. The most sophisticated of attacks and most challenging to identify/mitigate. |
| How does it cripple the target? |
The sheer quantity of traffic generated by the attack can completely block access to the end-resource (a website or a service). The magnitude of the attack is commonly measured in bits or packets per second. |
Protocol attacks consume all the processing capacity of the attacked-target or intermediate critical resources like a firewall causing service disruption. |
Application attacks establish a connection with the target and then exhaust the server resources by monopolizing processes and transactions. |
| Examples |
NTP Amplification, DNS Amplification, UDP Flood, TCP Flood |
Syn Flood, Ping of Death |
HTTP Flood, Attack on DNS Services |
To combat DDoS attacks, Cisco has partnered with Radware. The Radware solution can be deployed:
1. As a Decorator on the Firepower 4100s and 9300s appliances
2. Standalone appliance
3. Cloud and hybrid based
Take a look at the following links for more information:
https://www.youtube.com/watch?v=aOLM9md2eMQ
!
https://www.radware.com/partners/technologypartners/cisco-firepower-ngfw/
I hope this helps!
Thank you for rating helpful posts!
