Understand DoS and DDoS Attacks in Seconds

A recent DDoS attack incident saw reports beginning as early as March of this year of surveillance cameras and NVRs being compromised, and on September 23, the Taiwan Computer Emergency Response Team / Coordination Center (TWCERT/CC) also published news that many domestic hosting providers had suffered DDoS attacks, with the attacks possibly originating from a large number of compromised DVR surveillance systems domestically, affecting the websites and blogs of hosted customers. So what is a DDoS attack, and what protections exist against DoS? DDoS is one method within the broader category of DoS attacks, but in fact there are many different types of DoS attacks.

DoS：

Short for Denial of Service, DoS refers to an attack whose goal is to prevent a computer or network from providing normal service, known as a DoS attack

​Hackers continuously send requests, and the server, unable to handle the excessive volume, is ultimately overwhelmed. ​​

Hacker

DoS Attack

Targeted Host

​DDoS：

Short for Distributed Denial of Service. This refers to multiple attackers in different locations simultaneously launching an attack against one or more targets, or a single attacker controlling multiple machines in different locations and using them to attack a victim simultaneously. Because the attack originates from

points distributed across different locations, this type of attack is called a distributed denial-of-service attack, which greatly amplifies the power of the denial-of-service attack.

Hacker

DDoS Attack

DDoS Attack

DDoS Attack

Targeted Host

What defenses are there for surveillance cameras and NVRs? DDoS attacks are difficult to prevent because they're disguised as seemingly normal requests, but defenses can still be strengthened in the following three main areas:

● Strengthen the Firewall

Use a high-performance firewall device to limit abnormal IP requests, reduce invalid data that consumes large amounts of bandwidth, and block potential DDoS attacks.

● Upgrade Device Performance and Specifications

Upgrading device performance buys more buffer time when under attack, allowing a real-time response to the attack pattern without letting the surveillance equipment go down — minimizing the resulting damage.

● Monitor Internal Network Devices

A common security practice is to install a firewall to defend against hacker attacks coming from the external network, maintaining network security control. But the internal network

is easily overlooked. CyberVigilant, a product from the 25-year-old British security brand IndigoVision, can monitor internal network devices to defend against suspicious DoS attacks — when an anomaly occurs, it immediately connects to the control center, detects the abnormal traffic, and sends an alert to the console!!

​

indigovision_cybervigilant_specification_catalog.pdf

Download File