Detection, Tagging and Mitigation

Business model discussion (Security as a Service)

F5 Silverline Managed DDOS Protection Service: https://aws.amazon.com/marketplace/pp/F5-Networks-F5-Silverline-Managed-DDOS-Protection-/B083VZXLQX

HiveWind: https://aws.amazon.com/marketplace/pp/HiveWind-LLC-HiveShield-DDoS-Blocking-Load-Balance/B00WGTQF1G

Imperva: https://aws.amazon.com/marketplace/pp/Incapsula-Inc-Incapsula-DDoS-Protection-for-AWS/B00LNJNCDY

Mitigation XDP

https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=8789414

Automated Monitoring and Security Services in Federated Software-defined Network Infrastructures https://dspace.lib.ntua.gr/xmlui/bitstream/handle/123456789/50875/20200630_dissertation_APAVLIDIS.pdf?sequence=1&isAllowed=y

參考一下XDP, DDoS的防禦方式，好像有三層，比較粗的，比較細的，AI的。

Introducing SmartNICs in Server-based Data Plane Processing: The DDoS Mitigation Use Case: https://www.cambridge.org/core/journals/knowledge-engineering-review/article/orchestrating-ddos-mitigation-via-blockchainbased-network-provider-collaborations/1E9D4FF7E3B72E442D615F1C811B26CB

SmartNIC-based mitigation

Orchestrating DDoS mitigation via blockchain-based network provider collaborations https://www.cambridge.org/core/journals/knowledge-engineering-review/article/orchestrating-ddos-mitigation-via-blockchainbased-network-provider-collaborations/1E9D4FF7E3B72E442D615F1C811B26CB

為什麼要用Bloackchain

Fast Packet Processing with eBPF and XDP: Concepts, Code, Challenges, and Applications https://dl.acm.org/doi/pdf/10.1145/3371038?casa_token=iOI93t9XStwAAAAA:_1yQqdCG7NR6VAy5x37GZjc4sLv3y9HhgKu4ODUEDjdQgr6oNN7hO8cFW63KmKDRLtmlSWCLua-Ddw

ACHIEVING NETWORK RESILIENCY USING SOUND THEORETICAL AND PRACTICAL METHODS https://www.ideals.illinois.edu/bitstream/handle/2142/108512/NOUREDDINE-DISSERTATION-2020.pdf?sequence=1&isAllowed=y

Efficient DDoS Detection based on K-FKNN in Software Defined Networks https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=8889743

Examining the Security of DDoS Detection Systems in Software Defined Networks https://dl.acm.org/doi/pdf/10.1145/3360468.3368174?casa_token=rQ9cWtMR-ncAAAAA:85Hf_ygxCtQy-qLyFrmMKTdkytJ1PIBwahUvP2ezvkzEzzaI7OjaA71XzNHgH4E-2Fc_YSzZqZ_qCQ

Magic Transit makes your network smarter, better, stronger, and cheaper to operate https://blog.cloudflare.com/magic-transit/

KDATACENTER, https://www.kdatacenter.com/index.html

Super Fast Packet Filtering with eBPF and XDP https://events19.linuxfoundation.org/wp-content/uploads/2017/12/Super-Fast-Packet-Filtering-with-eBPF-and-XDP-Helen-Tabunshchyk-Cloudflare-1.pdf

Detecting Asymmetric Application-layer Denial-of-Service Attacks in-flight with FINELAME, http://nikos.vasilak.is/pubs/finelame:atc:2019/paper.pdf

Cases

XDP in Practice: DDoS Mitigation @Cloudflare https://www.infoq.com/presentations/xdp-ddos-cloudflare/

https://blog.cloudflare.com/protecting-remote-desktops-at-scale-with-cloudflare-access/

https://blog.cloudflare.com/l4drop-xdp-ebpf-based-ddos-mitigations/

EDR, Ransomware

268KB

Gartner Reprint_EDR.pdf

PDF

Open

https://www.gartner.com/doc/reprints?id=1-1Z8GOASP&ct=200612&st=sb&mkt_tok=eyJpIjoiWW1FNU1qZGxabVUyWkRNMiIsInQiOiJlUkZKOWJoeFlVdWJ5UjU0TnpvbXdqXC9zQ1wvYUpBRStZVTNISTFJT0VPVjZBU2RPMWxKUVhrWVcxYWdmZUNHcHdLVFhKZmVJZk5aV21SbHpvcThzdWJUaUUrVVVETDVneVp2emNaaFZadVNVbzlyK3g4RTJKc29nWjlXR0w4QTRBIn0%3Dwww.gartner.com

Stop Ransomware with NSX Network Detection and ResponseVMware Security Blog

LevelBlue Extended Detection and Response (XDR)LevelBlue

Ransomware Protection Market - Size, Companies & Industry Research, 2031Mordor Intelligence

https://www.sophos.com/en-us/content/ransomware.aspx?cmp=43104&utm_source=GoogleSearch&utm_campaign=MG_GC_GoogleSearch&utm_medium=cpc&utm_term=%2Bransomware&utm_content=SM102552&gclid=CjwKCAiA17P9BRB2EiwAMvwNyGQOGTnAci1MAYJTXqPoMz4O5nX1OpZdrXTpnGiQKqm5cq0prai5lxoCh1QQAvD_BwEwww.sophos.com

https://www.brighttalk.com/webcast/14671/372536/black-hat-webcast-series-ransomware-network-behavior-and-defensewww.brighttalk.com

https://www.lastline.com/blog/detecting-and-responding-to-ransomware/www.lastline.com

https://news.sophos.com/en-us/2020/08/04/the-realities-of-ransomware-five-signs-youre-about-to-be-attacked/

Network Detection & Response vs. Network Traffic Analysis https://www.extrahop.com/company/blog/2019/ndr-vs-nta-network-detection-and-response-defined/

https://www.cisecurity.org/white-papers/fall-2019-threat-of-the-quarter-ryuk-ransomware/www.cisecurity.org

Papers

http://cse.sustech.edu.cn/faculty/~zhangfw/paper/tang-compsec20.pdf

https://evessio.s3.amazonaws.com/customer/8c4659ee-526a-4e9c-89dc-f6f4c3c1a789/event/cybersecurity-chicago/Exhibitors/protectwise-0_ProtectWise-datasheet-NDR-Network-Detection-Response.pdf

Becoming a super hero is a fairly straight forward process:

Network Detection and Response (NDR)