Detecting Web DDoS

Denial-of-Service (DoS) attacks can take many forms, but their ultimate aim is to disrupt or completely block access to a website or web service. In this room, you will explore how DoS and DDoS attacks target the application layer, the techniques behind them, and how you, as a defender, can detect and mitigate these common threats.

Objectives

• Learn how denial-of-service attacks function
• Understand attacker motives behind the disruptive attacks
• See how web logs can help you reveal signs of web DoS and DDoS
• Get practice analyzing denial-of-service attacks through log analysis
• Discover detection and mitigation techniques defenders can use

Prerequisites

• Check out Security Principles for an overview of the CIA triad
• Complete Web Application Basics to learn HTTP methods and codes
• Work through Web Security Essentials for web infrastructure basics
• Review Splunk: Basics for an overview of Splunk searches

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting the Target Machine, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.

Lab machine

Status:Off

Start Lab Machine