Timeline for Launching a Distributed Denial of Service attack on a hidden service
Current License: CC BY-SA 3.0
12 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 2, 2015 at 5:03 | vote | accept | Aurora | ||
| S Jan 2, 2015 at 5:03 | history | bounty ended | Aurora | ||
| S Jan 2, 2015 at 5:03 | history | notice removed | Aurora | ||
| Dec 31, 2014 at 16:58 | answer | added | user5416 | timeline score: 1 | |
| Dec 31, 2014 at 0:53 | comment | added | Aurora | @Pielco11 hence why I stated that the attack would have to be Layer-7. I am aware of slow, memory consuming attacks such as slowlowris, and I think that this would be an attackers choice when attacking a hidden service. | |
| Dec 30, 2014 at 22:46 | comment | added | user3524 | I think that depend by the type of ddos attack.. in other words... you can ddos a web server without a lot of bandwidth for example overloading CPU or RAM: for example if you open a connection in stream mode and not in connect mode the server will handle the request until the connection drops out... so you can occupy RAM and CPU because the server is waiting your response.... you can avoid this type of ddos attack by setting a max for incoming connections and the delay time... I hope that this will help you.... PS: in fact web server use this type of connection for the upper cited reason | |
| Dec 26, 2014 at 23:09 | history | tweeted | twitter.com/#!/StackTor/status/548616696651870208 | ||
| Dec 26, 2014 at 20:04 | history | edited | Roya | CC BY-SA 3.0 |
added 1 character in body
|
| S Dec 26, 2014 at 19:24 | history | bounty started | Aurora | ||
| S Dec 26, 2014 at 19:24 | history | notice added | Aurora | Draw attention | |
| Dec 23, 2014 at 21:41 | comment | added | Jobiwan | I don't know but here are some thoughts: If you make a clearnet server also available as a hidden service, then the real IP is known and the best way to attack it is not through Tor. When using Tor to perform a DDoS, you use the exit nodes. My guess is that when you DDoS a hidden service, it would hit the Tor that hosts it way more than the web server behind it and that it would not take much bandwidth, but making lots of connections through different circuits. A firewall will have limited effect as it can not see individual streams and you can not reliably filter on source IP address. | |
| Dec 23, 2014 at 20:33 | history | asked | Aurora | CC BY-SA 3.0 |