Evaluation of current state of amplification-based DDoS attacks
E. G. A. M. Bohte, Manolis Stamatogiannakis, Herbert Bos · Data Archiving and Networked Services (DANS) · 2018
Amplification-based DDoS attacks are still a big threat to the availability of the internet. In quite some time there is no new paper published that gave an update on the current state of amplification DDoS attacks, taken into consideration it was a huge problem a few years ago. We performed multiple scans of the whole IPv4 address space and deployed two honey- pots to monitor amplification DDoS attacks to make a picture of the current state of amplification DDoS attacks. From the scan data and the honeypot data, we can conclude that NTP is the most dangerous protocol, for these kinds of attacks. Furthermore, China and The United States are the most targeted countries for amplification DDoS attacks.