With this training, participants will understand DDoS attacks, techniques and precautions to be taken in a possible DDoS attack on organizations.
TRAINING CONTENT
- BASIC CONCEPTS
- BASIC TCP/IP
- DOS/DDOS ATTACKS
- DOS/DDOS ATTACKS AGAINST WEB SERVERS
- DDOS APPLICATION
Who Should Participate?
Information Security Experts, System Experts, Network Experts, Forensic Informatics Experts, Law Enforcement Agencies
Program
• What is IP Spoofing
• DoS/DDoS
• What is a Zombie Computer
• Zombie Computer Work and Tasks
• Precautions Against Zombie Computers
• What is Botnet
• Botnet Applications
• Botnets from Past to Present
• Eggdrop
• GTBot
• Bobax
• Rustock
• Zeus
• Conficker
• IRC Bots
• Social Media Bots
• Mobile Botnets
• Mobile Botnets vs PC Botnet
• Hacktivist Groups
• DDoS Examples
• Wikileaks
• Mavi Marmara
• DDoS Examples from Turkey
• Turning Points of the Internet
• DARPA, ISO
• ARPANET
• INTERNET
• TCP/IP
• OSI Reference Model and Structure
• TCP/IP Model and Structure
• TCP/IP Layers
• Data Names at TCP/IP Layers
• Internet Registration Authorities
• TCP/IP Protocols and Working Methods
• Ethernet and Hardware Addressing
• Ethernet Fabric and Encapsulation
• ICMP Protocol
• ICMP Flood
• IP (Internet Protocol)
• IP Adress Classes
• IP Header Structure
• TCP Header Structure
• Admissions in TCP
• TCP Flag Concept
• DHCP Starvation Attack
• Causes
• Misconceptions about DDoS
• Syn Flood
• Backlog Queue Concept
• How to recognize a Syn Flood DDoS attack
• Syn Flood Tests Using Hping
• What to do During a Syn Flood Attack
• What is SynCookie
• Disadvantages of Syn Cookie
• What is Syn Cache
• What is Syn Proxy
• Disadvantages of Syn Proxy
• How HTTP Works
• HTTP GET
• HTTP POST
• HTTP Flood
• GET Flood
• POST Flood
• DoS/DDoS Attacks Caused by Software or Design Deficiencies
• Slowloris Tool and Its Use
• What is Rate Limiting
• UDP Protocol
• UDP Header Structure
• Creating UDP Packets with Hping
• IP Spoofing at the UDP Layer
• UDP Flood
• UDP Flood Test Using Hping
• DoS/DDoS Attacks on DNS Services
• DNS Architecture
• DNS Query Types
• Recursive Query
• İterative Query
• DNS Name Resolution
• IP Spoofing in DNS Protocol
• DNS and TCP Relationship
• DNS Flood Attacks
• Amplified DNS Flood Attacks
• Detecting DNS Flood Attacks
• Preventing DNS Flood Attacks
• DNS Caching
• DNS Anycast
• Rate Limiting
• DFAS
• Teardrop Attacks
• Ping of Death Attacks
• Writing a DDoS Bot Application
• DDoS Attack Example