Module 9 Cs 6250 Study Guide Rated A+

What are the two automated techniques used by ARTEMIS to protect against BGP hijacking? {Ans: 1) Prefix deaggregation - announcing more specific prefixes in order to mitigate prefix hijacking 2) Mitigation with multiple origin AS (MOAS) - third party organizations and service providers do BGP announcements for a given network}Describe a Reflection and Amplification attack. {Ans: A reflective attack is sending a bunch of spoofed requests to a server which will then DDoS the target on behalf of the attacker.}Explain provider-based blackholing. {Ans: A customer autonomous system announces a blackholing message to the provider with the host name of the DDoS victim. This usually contains a special community field - the provider will then stop advertising the prefix of the affected host.}What is one of the major drawbacks of BGP blackholing? {Ans: The destination under attack becomes unreachable. The mitigation technique is also ineffective if peer autonomous systems neglect / don't respect BGP Blackholing request.}DNS-based content delivery {Ans: When accessing the name of the service using DNS, the CDN computes the 'nearest edge server' and returns its IP address to the DNS client. It determines the nearest server, which results in the content being moved