Reflections on reflection (attacks)
May 24, 2017Marek Majkowski
Summary
This post details the analysis of reflection attacks, specifically NTP and SSDP, including their mechanics, prevalence, and statistics gathered from Cloudflare's logs. It explains how these attacks work, lists popular reflection vectors, and provides detailed statistics on NTP and SSDP attacks, including duration, number of reflectors, and peak bandwidth. It also touches on Cloudflare's automated defenses against such attacks.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack