Premium Essay

Lot2 - Task 2

In:

Submitted By kaiju138
Words 1120
Pages 5
Best Practices Guide for DoS/DDoS Prevention In this document are guidelines that can be implemented in order to prevent future Denial of Service (DoS) or Distributed Denial of Service (DDoS) attacks on the university. No one individual practice, contained in this guide, will act as a perfect form of prevention, but will instead act as an additional layer of security. By combining these practices, the chances of another DoS/DDoS attack succeeding will be greatly diminished.
Acceptable Use Policies
Acceptable Use policies define the types of actions that are allowed to be performed on systems and the network. These policies also define the actions that are to be taken if the policy is violated.
For the university, a policy may be created which states that can only use the computers for functions related to the school. This usage could be limited to homework and research, for example. If the computer is used for anything else, penalties could range from temporary suspension of computer privilege to expulsion, depending on the number and/or severity of the offenses.
This policy would have to be made publically available. This could be done in a number of ways, including, but not limited to, posting it in the computer labs, adding the acceptance of it to the login process, and redirecting the user to it if the user attempts to install software or access a prohibited folder.
Incident Response Procedures Incident Response procedures define the steps to take if any incident occurs. This document lists who the responders are, and what actions need to be taken. The university’s Incident Response document should cover the following:
Who the respondents are, along with their individual responsibilities
Details as to when the team should respond. Different priorities should be given based on the varying types of systems, and incidents
Who, on the response team, makes

Similar Documents

Free Essay

Best Practice Guide for a Ddos Attack

...Running head: Best Practice Guide Best Practice Guide for a DDoS Attack WGU – LOT2 Hacking Task 2 Abstract This paper will accompany a PowerPoint presentation about best practices for preventing a DDoS attack. This will be the best practice guide and will be mentioning and elaborating all of the points in the slideshow. Best Practice Guide for a DDoS Attack It is important to have a plan in place when dealing with a DDoS attack. This guide will serve as the best practice guide for the university. Outlined will be some of the best practices to help prevent a DDoS attack and will be followed by the university. The first thing that the university needs to do is create a response plan and practice the plan over and over. The worst thing that could happen is a DDoS attack starts to occur and nobody knows what to do or what their role is in stopping this attack. A team must be formulated and assignments can be broken down between team members to divide and conquer this attack. It is better to have five different people working on five different tasks or ways to stop the attack instead of five people working on one. The best way to understand the attack is to attack yourself and find the weak spots. Performing a vulnerability assessment on your network will give you a better understanding how your networks functions and where you can find single points of failure. Redundancy is being able to still continue working...

Words: 935 - Pages: 4

Premium Essay

Lot Task2

...Joseph W Costa LOT2 Task 2 5/24/2013 Best Practices in Prevention of DoS/DDoS Attacks This guide is meant to describe best practices for the detection and prevention of denial of service attacks, such as the event that recently occurred at the university. It was determined that based on current security guidelines and current controls in place, the university was still severely vulnerable from an internal aspect and all identified gaps need to be addressed and resolved. Each control described below will provide a more in depth look at the overall strategy of how a network should be protected but still allow for the functionality that is required to maintain normal operations. Know the Signs of an Attack An essential part of network security is knowing what the characteristics of an attack are, so they can be countered or prevented. When the university suffered an overwhelming internal DDoS attack, it required administrators to reevaluate its security guidelines based on what was known about the attack. As seen at the time of attack, certain characteristics were: Network performance unusually slow Website was unavailable for at least 24 hours Thousands of bogus HTTP packets sent to internal web server Taking these factors into account, it can be safe to say it was an actual attack rather than just legitimate network usage. Now that it is known what such an event would look like, identifying similar attacks in the future will be much easier and may allow...

Words: 1264 - Pages: 6