Advanced DNS Protection: mitigating sophisticated DNS DDoS attacks
Mar 7, 2024Omer Yoachimik, Cody Doucette
Summary
Introduced the Advanced DNS Protection system, a new defense mechanism against sophisticated DNS-based DDoS attacks. This system complements existing DDoS defenses by leveraging a stateful mitigation platform called `flowtrackd` and a distributed, gossip-based threat intelligence sharing mechanism. It aims to address attacks that are difficult to mitigate with traditional fingerprinting methods, particularly randomized and DNS laundering attacks. New DNS-centric data points have also been added to the Network Analytics dashboard and GraphQL API.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack