[B! DoS] HeavyFeatherã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

HeavyFeather id:HeavyFeather

DoSã«é–¢ã™ã‚‹HeavyFeatherã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (11)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ãƒãƒƒã‚·ãƒ¥ãƒ†ãƒ¼ãƒ–ãƒ«ã«å¯¾ã™ã‚‹æ”»æ’ƒæ‰‹æ³•ã®ã¯ãªã—
ãƒãƒƒã‚·ãƒ¥ãƒ†ãƒ¼ãƒ–ãƒ«å®Ÿè£…ã«å¯¾ã™ã‚‹æ”»æ’ƒã¨ã¯ æ˜¨å¹´12æœˆæœ«ã«ãƒ‰ã‚¤ãƒ„ã§é–‹å‚¬ã•ã‚ŒãŸCCCï¼ˆChaos Communication Congressï¼‰ã«ãŠã„ã¦ã€"Effective Denial of Service attacks against web application platforms"ï¼ˆWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«å¯¾ã™ã‚‹åŠ¹çŽ‡çš„ãªDoSæ”»æ’ƒï¼‰ã¨é¡Œã—ãŸç™ºè¡¨ãŒè¡Œã‚ã‚Œã¾ã—ãŸã€‚ã‚¿ã‚¤ãƒˆãƒ«ã«ã€ŒWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã€ã¨ã¤ã„ã¦ã¯ã„ã¾ã™ãŒã€ã“ã®å•é¡Œã¯Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«é™ã£ãŸã‚‚ã®ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ä»¥ä¸‹ã®ä¸‰ã¤ã®æ¡ä»¶ãŒæƒã£ãŸã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã‚ã‚Œã°ä¾‹å¤–ãªãã€DoSæ”»æ’ƒã®é¤Œé£Ÿã¨ãªã‚‹å±é™ºãŒã‚ã‚Šã¾ã™ã€‚ ãƒãƒƒã‚·ãƒ¥ãƒ†ãƒ¼ãƒ–ãƒ«ã¨ã„ã†ãƒ‡ãƒ¼ã‚¿æ§‹é€ ã‚’ä½¿ã£ã¦ã„ã‚‹ ãƒãƒƒã‚·ãƒ¥å€¤ã‚’è¨ˆç®—ã™ã‚‹ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒã€Œè„†å¼±ã€ã§ã‚ã‚‹ ãƒãƒƒã‚·ãƒ¥ãƒ†ãƒ¼ãƒ–ãƒ«ã«ç™»éŒ²ã™ã‚‹ãƒ‡ãƒ¼ã‚¿ã‚’ãƒ—ãƒã‚°ãƒ©ãƒ å¤–éƒ¨ã‹ã‚‰æŒ‡å®šã§ãã‚‹ ãƒãƒƒã‚·ãƒ¥ãƒ†ãƒ¼ãƒ–ãƒ«ã¨ãã®å•é¡Œ Wikipediaï¼ˆæ—¥æœ¬èªžç‰ˆï¼‰
HeavyFeather 2012/02/21
security

hash

DoS

web
ãƒªãƒ³ã‚¯
Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«å¯¾ã™ã‚‹åºƒç¯„ãªDoSæ”»æ’ƒæ‰‹æ³•(hashdos)ã®å½±éŸ¿ã¨å¯¾ç–
28C3(28th Chaos Communication Congress)ã«ãŠã„ã¦ã€Effective Denial of Service attacks against web application platformsï¼ˆWebãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã«å¯¾ã™ã‚‹åŠ¹æžœçš„ãªã‚µãƒ¼ãƒ“ã‚¹å¦¨å®³æ”»æ’ƒï¼‰ã¨é¡Œã™ã‚‹ç™ºè¡¨ãŒã‚ã‚Šã¾ã—ãŸï¼ˆã‚¿ã‚¤ãƒ ã‚¹ã‚±ã‚¸ãƒ¥ãƒ¼ãƒ«ã€è¬›æ¼”ã‚¹ãƒ©ã‚¤ãƒ‰ï¼‰ã€‚ ã“ã‚Œã«ã‚ˆã‚‹ã¨ã€PHPã‚’ã¯ã˜ã‚ã¨ã™ã‚‹å¤šãã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã«å¯¾ã—ã¦ã€CPUè³‡æºã‚’æž¯æ¸‡ã•ã›ã‚‹ã‚µãƒ¼ãƒ“ã‚¹å¦¨å®³æ”»æ’ƒ(DoSæ”»æ’ƒ)ãŒå¯èƒ½ãªæ‰‹æ³•ãŒè¦‹ã¤ã‹ã£ãŸã¨ã„ã†ã“ã¨ã§ã™ã€‚ã“ã®æ”»æ’ƒã¯ã€hashdos ã¨å‘¼ã°ã‚Œã¦ã„ã¾ã™ã€‚ æ¦‚è¦PHPãªã©å¤šãã®è¨€èªžã§ã¯ã€æ–‡å—åˆ—ã‚’ã‚ãƒ¼ã¨ã™ã‚‹é…åˆ—ï¼ˆé€£æƒ³é…åˆ—ã€ãƒãƒƒã‚·ãƒ¥ï¼‰ãŒç”¨æ„ã•ã‚Œã¦ãŠã‚Šã€HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã‚‚é€£æƒ³é…åˆ—ã®å½¢ã§æä¾›ã•ã‚Œã¾ã™ã€‚PHPã®å ´åˆã€$_GETã€$_POSTãªã©ã§ã™ã€‚ é€£æƒ³é…åˆ—ã®å®Ÿè£…ã«ã¯
HeavyFeather 2012/01/17
security

web

hash

DoS
ãƒªãƒ³ã‚¯
LANå†…ã§ä½¿ç”¨ä¸ã®IPã‚¢ãƒ‰ãƒ¬ã‚¹(pingã§å¿œç”ãŒã‚ã‚‹ãƒŽãƒ¼ãƒ‰)ã‚’ç°¡æ˜“ã«èª¿æŸ»ã™ã‚‹ãƒ¯ãƒ³ãƒ©ã‚¤ãƒŠãƒ¼(Windowsç·¨) - å…ƒRX-7ä¹—ã‚Šã®é©å½“ãªæ—¥ã€…
è«¸äº‹æƒ…ã§ã€Windowsã®PCã‚’ä½¿ã‚ã–ã‚‹ã‚’ãˆãªã„çŠ¶æ³ã ã£ãŸã®ã§ãƒ»ãƒ»ãƒ»ã€‚ç°¡æ˜“ãªæ„Ÿã˜ã§ã€‚ > for /l %i in (1,1,254) do ping -w 50 -n 1 192.168.1.%i && arp -a 192.168.1.%i >> ping.logâ†‘ã‚’å®Ÿè¡Œã™ã‚‹ã¨ã€192.168.1.1 ã€œ 192.168.1.254ã«å¯¾ã—ã¦é€£ç¶šã—ã¦ping(ICMP echo)ã‚’å®Ÿè¡Œã—ã¦ã€ãƒã‚°ãƒ•ã‚¡ã‚¤ãƒ«ã«çµæžœ(å¿œç”ãŒã‚ã£ãŸãƒŽãƒ¼ãƒ‰)ã‚’æ›¸ãè¾¼ã¿ã¾ã™ã€‚ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆã¯å¿µã®ãŸã‚50msecã«ã—ã¾ã—ãŸã€‚LANå†…ã ã£ãŸã‚‰ã€ã‚‚ã£ã¨å°ã•ãã¦ã‚‚è‰¯ã„ã¨æ€ã„ã¾ã™ã€‚ (å¯¾è±¡IPã‚¢ãƒ‰ãƒ¬ã‚¹ã¯"dynamic"ã¨ã‹"å‹•çš„"ã¨ã‹æ›¸ã‹ã‚Œã¦ã„ã‚‹è¡Œã«ãªã‚Šã¾ã™ã€‚â†ã§grepã—ã¦ã‚„ã‚‹ã¨IPã‚¢ãƒ‰ãƒ¬ã‚¹ã®ä¸€è¦§ãŒå–ã‚Œã¾ã™ã€‚ã¡ãªã¿ã«ä½™è«‡ã§ã™ãŒã€arpã®å®Ÿè¡Œçµæžœãªã®ã§ã€MACã‚¢ãƒ‰ãƒ¬ã‚¹ã‚‚è¨˜éŒ²ã•ã‚Œã¾ã™ã€‚) # Windowsã®ã‚³ãƒžãƒ³ãƒ‰ãƒ—ãƒãƒ³ãƒ—ãƒˆãª
HeavyFeather 2011/01/03
Windows

dos

command

network

tips
ãƒªãƒ³ã‚¯
iptablesã§ã§ãã‚‹DoSï¼DDoSå¯¾ç–
ã¯ã˜ã‚ã« ä»Šå›žã¯DoSï¼DDoSå¯¾ç–ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ä»Šå›žã¯iptablesã‚’ä½¿ã£ãŸæ–¹æ³•ã¨ã¨ã‚‚ã«ã€Linuxã®ã‚«ãƒ¼ãƒãƒ«ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã‚’ä½¿ã£ãŸæ–¹æ³•ã‚‚ç´¹ä»‹ã—ã¾ã™ã€‚ é–¢é€£ãƒªãƒ³ã‚¯ï¼š â†’Linuxã§ä½œã‚‹ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ï¼»ãƒ‘ã‚±ãƒƒãƒˆãƒ•ã‚£ãƒ«ã‚¿ãƒªãƒ³ã‚°è¨å®šç·¨ï¼½ http://www.atmarkit.co.jp/flinux/rensai/security05/security05a.html â†’é€£è¼‰è¨˜äº‹ ã€Œç¿’ã†ã‚ˆã‚Šæ…£ã‚Œã‚ï¼ iptablesãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆé›†ã€ http://www.atmarkit.co.jp/flinux/index/indexfiles/iptablesindex.html â†’é€£è¼‰è¨˜äº‹ ã€Œç¿’ã†ã‚ˆã‚Šæ…£ã‚Œã‚ï¼ iptablesãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆé›† æ”¹è¨‚ç‰ˆã€ http://www.atmarkit.co.jp/flinux/index/indexfiles/newiptablesindex.html DoSï¼
HeavyFeather 2010/07/24
server

security

DoS

Linux

iptables

DDoS

tips
ãƒªãƒ³ã‚¯
ã‚°ãƒ¼ã‚°ãƒ«ã¯ãƒžã‚¤ã‚±ãƒ«ãƒ»ã‚¸ãƒ£ã‚¯ã‚½ãƒ³ã®æ¤œç´¢é›†ä¸ã‚’æœ€åˆã€Œæ”»æ’ƒã€ã ã¨æ€ã£ãŸï¼‹ãƒ¤ãƒ•ãƒ¼ã‚‚æ–°è¨˜éŒ²ï¼šMichael Jackson Traffic and Search Spike
ã‚°ãƒ¼ã‚°ãƒ«ã¯ãƒžã‚¤ã‚±ãƒ«ãƒ»ã‚¸ãƒ£ã‚¯ã‚½ãƒ³ã®æ¤œç´¢é›†ä¸ã‚’æœ€åˆã€Œæ”»æ’ƒã€ã ã¨æ€ã£ãŸï¼‹ãƒ¤ãƒ•ãƒ¼ã‚‚æ–°è¨˜éŒ²ï¼šMichael Jackson Traffic and Search Spike Google"We're sorry, but your query looks similar to automated requests from a computer virus or spyware application. To protect our users, we can't process your request right now." - Error Message shown on Google News, right after the news of Jackson's death broke. ã€Œç”³ã—è¨³ã‚ã‚Šã¾ã›ã‚“ã€‚ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ ã‚¦ã‚£ãƒ«ã‚¹ã‚„ã‚¹ãƒ‘ã‚¤ã‚¦ã‚§ã‚¢ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è‡ªå‹•ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¨é¡žä¼¼ã—ãŸã‚¯ã‚¨
HeavyFeather 2009/07/01
Google

internet

DoS

neta

twitter

search

web
ãƒªãƒ³ã‚¯
Apacheã«å¯¾ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹æ‹’å¦æ”»æ’ƒã‚’å›žé¿ã™ã‚‹æ–¹æ³•
ç†è€…ã¯æœ€è¿‘ï¼ŒApache HTTPã‚µãƒ¼ãƒãƒ¼ã«å¯¾ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹æ‹’å¦æ”»æ’ƒã‚’é˜²å¾¡ã™ã‚‹Webãƒ™ãƒ¼ã‚¹ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ãƒ„ãƒ¼ãƒ«ã€Œmod_evasiveã€ã‚’ä½¿ã„å§‹ã‚ãŸã€‚mod_evasiveã¯ç‰¹å®šã®æŒ™å‹•ã‚’æŽ¢ã—ã¦ãã‚Œã‚’ãƒ–ãƒãƒƒã‚¯ã™ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ã‚ã‚‹ã€‚ mod_evasiveã¯ï¼Œç†è€…ãŒæ˜¨å¹´ã®12æœˆã«ç´¹ä»‹ã—ãŸã€ŒSuhosinã€ã«ä¼¼ã¦ã„ã‚‹ï¼ˆé–¢é€£è¨˜äº‹ï¼šPHPã®ã€Œå®ˆè·ç¥žã€Suhosinï¼‰ã€‚Suhosinã¯PHPã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ãƒ»ã‚¨ãƒ³ã‚¸ãƒ³ã®å®‰å…¨æ€§ã‚’å¤§å¹…ã«é«˜ã‚ã‚‹ãƒ‘ãƒƒãƒã§ã‚ã‚‹ã€‚Suhosinã¯ï¼Œå®³ã‚’åŠã¼ã™å±é™ºæ€§ã‚’æŒã¤ã‚ã‚Šã¨ã‚ã‚‰ã‚†ã‚‹Webãƒ™ãƒ¼ã‚¹ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’æ¤œå‡ºã—ï¼Œãã‚Œã‚‰ãŒPHPã‚¨ãƒ³ã‚¸ãƒ³ã‚’è¶Šãˆã¦ã‚·ã‚¹ãƒ†ãƒ ã‚„ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«åˆ°é”ã™ã‚‹ã®ã‚’é˜²ãä¸Šã§å½¹ã«ç«‹ã¤ã€‚ mod_evasiveãŒæ©Ÿèƒ½ã™ã‚‹ä»•çµ„ã¿ã‚’èª¬æ˜Žã—ã‚ˆã†ã€‚mod_evasiveã¯ã¾ãšURLãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’Apacheã‚µãƒ¼ãƒãƒ¼ã«é€ä¿¡ã™ã‚‹IPã‚¢ãƒ‰ãƒ¬ã‚¹ã®è¨˜éŒ²ã‚’å–ã‚‹ã€‚ãã®å¾Œï¼Œã‚ã‚‰ã‹ã˜ã‚è¨å®šã—ãŸè¨±
HeavyFeather 2007/05/20
apache

DoS

server

security

tips
ãƒªãƒ³ã‚¯
ã‚µãƒ¼ãƒã«DoSè€æ€§ã‚’ä»˜ã‘ã‚‹ - stanaka's blog
ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒ“ã‚¹ã§ã¯ã€ã‚¢ã‚¯ã‚»ã‚¹ãŒé›†ä¸ã—ã¦ã€ã‚µã‚¤ãƒˆãŒè½ã¡ã‚‹ã€ã¨ã„ã†ã®ã¯ã€ã‚ˆãã‚ã‚‹è©±ã§ã™ã€‚ç´”ç²‹ã«äººæ°—ãŒå‡ºã¦ã‚¢ã‚¯ã‚»ã‚¹é›†ä¸ã™ã‚‹ãªã‚‰ã€ã‚µãƒ¼ãƒç®¡ç†å´ã®è²¬ä»»ã¨è¨€ã‚ã‚Œã¦ã‚‚ã€ã—ã‹ãŸãªã„ã¨æ€ã„ã¾ã™ã€‚ã—ã‹ã—ã€botã‚„F5ã‚¢ã‚¿ãƒƒã‚¯ã«ã‚ˆã‚‹çªç™ºçš„ãªé›†ä¸ã‚¢ã‚¯ã‚»ã‚¹ã§ã€è½ã¡ã¦ã—ã¾ã†ã€ã¨ã„ã†ã®ã¯ã€é‹å–¶å´ã¨ã—ã¦ã‚‚ã€ã‚ã¾ã‚Šç´å¾—ãŒã„ãã‚‚ã®ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ãã®ã‚ˆã†ãªçªç™ºçš„ãªã‚¢ã‚¯ã‚»ã‚¹ã«å¯¾å¿œã™ã‚‹ãŸã‚ã«ã€å¤§é‡ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’ã—ã¦ãã‚‹ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’æ¤œå‡ºã—ã€å„ªå…ˆåº¦ã‚’è½ã™ã‹ã€ã‚¢ã‚¯ã‚»ã‚¹ç¦æ¢ã«ã™ã‚‹æ–¹æ³•ãªã©ãŒã‚ã‚Šã¾ã™ã€‚ ã¨ã„ã†ã‚ã‘ã§ã€Apacheãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ãã‚Œã‚’æ¤œå‡ºã™ã‚‹ãŸã‚ã®mod_dosdetectorã‚’é–‹ç™ºã—ã¾ã—ãŸã€‚(ã¡ãªã¿ã«ã‚³ã‚¢éƒ¨åˆ†ã®é–‹ç™ºæœŸé–“ã¯ã€Apacheãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã£ã¦ã€ã©ã†æ›¸ãã‚“ã ã£ã‘ã€ã¨ã„ã†çŠ¶æ…‹ã‹ã‚‰ã€3æ—¥ã§ã—ãŸã€‚) mod_dosdetectorã¯ã€Apacheãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ã—ã¦å‹•ä½œã—ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã”ã¨ã«ã‚¢ã‚¯ã‚»ã‚¹é »åº¦ã‚’æ¸¬å®šã—ã€è¨
HeavyFeather 2007/02/06
web

server

apache

DoS
ãƒªãƒ³ã‚¯
DNSä»‹ã—ãŸDDoSæ”»æ’ƒã¯ãƒ‡ãƒ¼ã‚¿ã‚’40å€ã«å¢—å¹…â€•â€•è¦å¯ŸåºãŒæ¤œè¨¼
è¦å¯ŸåºãŒDNSã®å†å¸°æ¤œç´¢ã‚’æ‚ªç”¨ã—ãŸDDoSæ”»æ’ƒã‚’æ¤œè¨¼ã—ãŸã¨ã“ã‚ã€å…ƒã®ãƒ‡ãƒ¼ã‚¿ã®ç´„40å€ã‚‚ã®ãƒ‡ãƒ¼ã‚¿ãŒæ”»æ’ƒå¯¾è±¡ã«é€ã‚Šã¤ã‘ã‚‰ã‚Œã‚‹ã“ã¨ãŒåˆ†ã‹ã£ãŸã€‚ è¦å¯Ÿåºã¯7æœˆ11æ—¥ã€DNSã®å†å¸°çš„ãªå•ã„åˆã‚ã›ã‚’æ‚ªç”¨ã—ãŸDDoSæ”»æ’ƒã«ã¤ã„ã¦ã¾ã¨ã‚ãŸãƒ¬ãƒãƒ¼ãƒˆã‚’å…¬é–‹ã—ãŸã€‚ ã“ã®æ”»æ’ƒã§ã¯ã€ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒã¨ã—ã¦é‹ç”¨ã•ã‚Œã¦ã„ã‚‹DNSã‚µãƒ¼ãƒã®è¨å®šã®ä¸å‚™ã‚’çªãã€è¸ã¿å°åŒ–ã™ã‚‹ã“ã¨ã«ã‚ˆã£ã¦ã€è¢«å®³è€…ã«å¤§é‡ã®ãƒ‡ãƒ¼ã‚¿ã‚’é€ã‚Šã¤ã‘ã‚‹ã€‚é€ä¿¡å…ƒIPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’è©ç§°ã—ãŸå†å¸°çš„å•ã„åˆã‚ã›ï¼ˆå†èµ·æ¤œç´¢ï¼‰ã‚’è¤‡æ•°ã®DNSã‚µãƒ¼ãƒã«é€ã‚Šã¤ã‘ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€æ”»æ’ƒå¯¾è±¡ã«å•ã„åˆã‚ã›ã®æ•°åå€ã®å¿œç”ãƒ‡ãƒ¼ã‚¿ã‚’é€ä¿¡ã•ã›ã€å¯¾è±¡ã®ã‚·ã‚¹ãƒ†ãƒ ã‚’éŽè² è·çŠ¶æ…‹ã«é™¥ã‚Œã‚‹ã€‚DNSã‚µãƒ¼ãƒã¯ã€ã€Œãƒžã‚¤ã‚¯ã«ã—ã‚ƒã¹ã£ãŸå£°ã‚’å¢—å¹…ã•ã›ã‚‹ã‚¢ãƒ³ãƒ—ã®ã‚ˆã†ãªå½¹å‰²ã‚’æžœãŸã™ã€ï¼ˆè¦å¯Ÿåºï¼‰ã“ã¨ã«ãªã‚‹ã€‚ 2006å¹´3æœˆã«ç™ºç”Ÿã—ãŸæ”»æ’ƒã§ã¯ã€æ—¥æœ¬å›½å†…ã®DNSã‚µãƒ¼ãƒã‚‚è¸ã¿å°ã«æ‚ªç”¨ã•ã‚Œã¦ã„ã‚‹ã“ã¨ãŒæŒ‡æ‘˜ã•ã‚Œã€JPCERT/CCãªã©ã‹ã‚‰æ³¨
HeavyFeather 2006/07/13
security

DNS

DoS
ãƒªãƒ³ã‚¯
2ã¡ã‚ƒã‚“ãã‚‹ã€å¤§è¦æ¨¡ãªDDoSæ”»æ’ƒã§ä¸€æ™‚ã‚¢ã‚¯ã‚»ã‚¹ä¸èƒ½ã« | ã‚¹ãƒ©ãƒ‰
åç„¡ã—æ›°ãã€"ITmediaã®è¨˜äº‹ã«ã‚ˆã‚‹ã¨ã€6æœˆ19æ—¥ã«2ã¡ã‚ƒã‚“ãã‚‹ã§å¤§è¦æ¨¡ãªæŽ¥ç¶šéšœå®³ãŒç™ºç”Ÿã—ãŸãŒã€ãã®åŽŸå› ã¯ãªã‚“ã¨æ¯Žç§’5å„„ã‚¢ã‚¯ã‚»ã‚¹ã¨ã„ã†å¤§è¦æ¨¡ãªDDoSæ”»æ’ƒã§ã‚ã£ãŸã¨ã®ã“ã¨ï¼ˆ2ché‹ç”¨æƒ…å ±ï¼‰ã€‚ 19æ—¥ã®å¤§è¦æ¨¡éšœå®³ã§ã¯ã€18æ—¥åˆå¾Œ8æ™‚åŠã”ã‚ã‹ã‚‰æ–ç¶šçš„ã«æŽ¥ç¶šéšœå®³ãŒç™ºç”Ÿã—ã€19æ—¥åˆå‰1æ™‚ã«å¤§è¦æ¨¡ãªéšœå®³ãŒç™ºç”Ÿã—ã¦ã„ãŸã€‚å½“åˆã¯ãƒ‡ãƒ¼ã‚¿ã‚»ãƒ³ã‚¿ãƒ¼ã®ãƒ«ãƒ¼ã‚¿ãŒæ•…éšœã—ãŸãŸã‚ãªã©ã¨ã‚‚è¨€ã‚ã‚Œã¦ã„ãŸãŒã€åŽŸå› ã¯ã“ã®DDoSæ”»æ’ƒã§ã‚ã£ãŸã€‚ãƒ«ãƒ¼ã‚¿ã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã«ã‚ˆã‚ŠæŽ¥ç¶šéšœå®³ã‹ã‚‰ã¯å›žå¾©ã—ãŸã‚‚ã®ã®ã€ç¾åœ¨ã‚‚æ”»æ’ƒã¯ç¶šã„ã¦ã„ã‚‹ã¨ã®äº‹ã€‚æ”»æ’ƒè€…ã«ã¤ã„ã¦ã‚‚è©³ã—ã„ã“ã¨ã¯ã‚ã‹ã£ã¦ã„ãªã„ã‚ˆã†ã ã€‚ ã—ã‹ã—æ¯Žç§’5å„„ã‚¢ã‚¯ã‚»ã‚¹ã¨ã¯ã€ä½•å°ãã‚‰ã„ã®ãƒžã‚·ãƒ³ãŒæ”»æ’ƒã«å‚åŠ ã—ã¦ã„ã‚‹ã‚“ã§ã—ã‚‡ã†ã‹ãï¼Ÿ"
HeavyFeather 2006/06/21
security

DoS
ãƒªãƒ³ã‚¯
DNSã®ä»•çµ„ã¿ã‚’æ‚ªç”¨ã—ãŸDDoSæ”»æ’ƒãŒç™ºç”Ÿã€å›½å†…ã‚µãƒ¼ãƒã‚‚ã€Œè¸ã¿å°ã€ã«
DNSã®å†å¸°æ¤œç´¢ã®ä»•çµ„ã¿ã‚’ç”¨ã„ãŸåºƒç¯„ãªDDoSæ”»æ’ƒãŒè¤‡æ•°ç™ºç”Ÿã—ã€ã—ã‹ã‚‚ãã®æ”»æ’ƒã«æ—¥æœ¬å›½å†…ã®ã‚µã‚¤ãƒˆãŒæ‚ªç”¨ã•ã‚Œã¦ã„ã‚‹ã€‚ DNSã®å†å¸°æ¤œç´¢ã®ä»•çµ„ã¿ã‚’ç”¨ã„ãŸDDoSï¼ˆåˆ†æ•£DoSï¼‰æ”»æ’ƒãŒè¤‡æ•°ç™ºç”Ÿã—ã¦ã„ã‚‹ï¼ˆé–¢é€£è¨˜äº‹ï¼‰ã€‚ã—ã‹ã‚‚ãã®æ”»æ’ƒã«æ—¥æœ¬å›½å†…ã®ã‚µã‚¤ãƒˆãŒæ‚ªç”¨ã•ã‚Œã¦ã„ã‚‹ã“ã¨ã‹ã‚‰ã€JPCERTã‚³ãƒ¼ãƒ‡ã‚£ãƒãƒ¼ã‚·ãƒ§ãƒ³ã‚»ãƒ³ã‚¿ãƒ¼ï¼ˆJPCERT/CCï¼‰ã¯3æœˆ29æ—¥ã€è¦å‘Šã‚’ç™ºã—ãŸã€‚ ä¸€é€£ã®DDoSæ”»æ’ƒã§ã¯ã€ãƒœãƒƒãƒˆãŒç›´æŽ¥ã‚¿ãƒ¼ã‚²ãƒƒãƒˆã«æ”»æ’ƒãƒ‘ã‚±ãƒƒãƒˆã‚’é€ã‚Šä»˜ã‘ã‚‹å…¸åž‹çš„ãªDoSæ”»æ’ƒã¨ã¯ç•°ãªã‚Šã€è¨å®šãŒä¸ååˆ†ãªDNSã‚µãƒ¼ãƒã«å¯¾ã™ã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’æ‚ªç”¨ã™ã‚‹æ‰‹æ³•ãŒç”¨ã„ã‚‰ã‚Œã¦ã„ã‚‹ã€‚ æ”»æ’ƒè€…ã¯ã€å†å¸°æ¤œç´¢ã‚’è¨±å¯ã—ã¦ã„ã‚‹DNSã‚µãƒ¼ãƒï¼ˆã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒï¼‰ã«ã€è¿”ä¿¡å…ˆã¨ã—ã¦è¢«å®³è€…ã‚’ã‹ãŸã£ãŸã‚¯ã‚¨ãƒªã‚’é€ã‚Šä»˜ã‘ã‚‹ã€‚å†å¸°æ¤œç´¢ã®ç¯„å›²ã‚’é™å®šã—ã¦ã„ãªã„DNSã‚µãƒ¼ãƒãŒã“ã‚Œã«ç”ãˆã€å¤§é‡ã®DNSãƒªãƒ—ãƒ©ã‚¤ã‚’é€ä¿¡ã—ã¦ã—ã¾ã†ãŸã‚ã€è¢«å®³è€…å´ãŒDoSçŠ¶æ…‹ã«é™¥ã‚‹ã¨ã„ã†ä»•çµ„ã¿ã ã€‚ã“ã®å ´åˆD
HeavyFeather 2006/03/30
DNSã®å†å¸°å•ã„åˆã‚ã›ã‚’åˆ©ç”¨

security

DoS
ãƒªãƒ³ã‚¯
ã‚µãƒ³ãƒ»ãƒžã‚¤ã‚¯ãƒã‚·ã‚¹ãƒ†ãƒ ã‚ºã®ã€ŒSun Gridã€ã€é–‹å§‹åˆæ—¥ã«DoSæ”»æ’ƒ
Sun Microsystemsã¯ç±³å›½æ™‚é–“3æœˆ22æ—¥ã€å…¬é–‹ã•ã‚ŒãŸã°ã‹ã‚Šã®ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚µãƒ¼ãƒ“ã‚¹ã€ŒSun Gridã€ãŒã€æä¾›é–‹å§‹åˆæ—¥ã«ã‚µãƒ¼ãƒ“ã‚¹æ‹’å¦ï¼ˆDoSï¼‰æ”»æ’ƒã‚’å—ã‘ãŸã“ã¨ã‚’æ˜Žã‚‰ã‹ã«ã—ãŸã€‚ Sunã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®è©¦ç”¨ã‚’ä¿ƒé€²ã™ã‚‹ãŸã‚ã€éŸ³å£°èªã¿ä¸Šã’ã‚µãƒ¼ãƒ“ã‚¹ã‚’ä¸€èˆ¬ã«å…¬é–‹ã«ã—ã¦ã„ãŸã€‚ã“ã‚Œã‚’åˆ©ç”¨ã™ã‚‹ã¨ã€ãŸã¨ãˆã°ã€ãƒ–ãƒã‚°ã‚’ãƒãƒƒãƒ‰ã‚ãƒ£ã‚¹ãƒˆã«å¤‰æ›´ã™ã‚‹ãªã©ã¨ã„ã£ãŸã“ã¨ãŒå¯èƒ½ã«ãªã‚‹ã€‚ã ãŒã€ã€Œã“ã‚ŒãŒDoSæ”»æ’ƒã®æ¨™çš„ã¨ãªã£ãŸã€ã¨Sunã®ãƒ¦ãƒ¼ãƒ†ã‚£ãƒªãƒ†ã‚£ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ãƒ†ã‚£ãƒ³ã‚°æ‹…å½“ã‚·ãƒ‹ã‚¢ãƒ‡ã‚£ãƒ¬ã‚¯ã‚¿ãƒ¼Aisling MacRunnelsæ°ã¯ç±³å›½æ™‚é–“3æœˆ22æ—¥ã«å¿œã˜ãŸã‚¤ãƒ³ã‚¿ãƒ“ãƒ¥ãƒ¼ã§èªžã£ãŸã€‚ DoSæ”»æ’ƒã§ã¯ã€è¤‡æ•°å°ã®ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ï¼ˆãƒãƒƒã‚«ãƒ¼ã®æ”»æ’ƒã«ã‚ˆã‚Šä¹—ã£å–ã‚‰ã‚ŒãŸPCã§æ§‹æˆã•ã‚ŒãŸã€Œãƒœãƒƒãƒˆãƒãƒƒãƒˆã€ã®ã“ã¨ãŒå¤šã„ï¼‰ãŒä¸€æ–‰ã«ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã«ã‚ã‚‹ã‚¿ãƒ¼ã‚²ãƒƒãƒˆã‚’æ”»æ’ƒã™ã‚‹ã€‚ä»Šå›žã€æ”»æ’ƒã®æ¨™çš„ã¯ã“ã®éŸ³å£°èªã¿ä¸Šã’ã‚µãƒ¼ãƒ“ã‚¹ã¨ãªã‚Šã€åŒã‚µãƒ¼ãƒ“ã‚¹ã¯åœæ¢ã«è¿½ã„è¾¼
HeavyFeather 2006/03/24
security

DoS

Sun
ãƒªãƒ³ã‚¯
1