The real cause of large DDoS - IP Spoofing
Mar 6, 2018Marek Majkowski

Summary
This post delves into the root cause of large-scale Distributed Denial of Service (DDoS) attacks, identifying IP spoofing as the primary enabler. It explains how IP spoofing works in both direct and amplification attacks, illustrating the technical challenges and internet design properties that make it possible. The post details how Cloudflare analyzes spoofed IP patterns and discusses solutions like BCP38 and the role of internet carriers in mitigating these threats, thereby expanding the understanding of network-level vulnerabilities within the security thread.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack