Shengbao Cai, Zhang Lu, and Li Fu are members of the 0Kee Team from Information Security Department of Qihoo 360 Technology Co.. The department is dedicated to protect the security of the entire business line of the company. 0Kee Team have independently designed the business security automatic defense system and many other defense tools / platforms for company. It has been invited to make presentations at BlackHat, Kcon etc.
[Abstract]
==========
DDOS is the most prominent security threat the internet network facing now. Among all DDOS methods, reflective DDOS is most popular and powerful attack due to low cost, low threshold and excellent effort. Meanwhile, the real reflective DDOS attack leads to more and more powerful network flow.
During our research, we found a new way to exploit a specific UPD protocol which widely used in public network and obviously gains high multi reflective network flow. The multiple can reach at 50000 which is the highest known. In this case, our researcher can exploit a 2TB/s DDOS attack only via a family network. That also means we could make most network paralyzed in a simple way.