Easy language ddos attack Netease easy shield ddos protection

A few days ago, Master An, a member of the domestic White Hat Group of Twenty and the core founder of the Hawk Alliance, made a major upgrade to Mo Zhedun's DDoS high defense strategy and introduced multi-dimensional DDoS detection and protection measures to meet the security needs of online games and industries for today's complex Internet environment. A series of new algorithms have been developed to solve the problems faced by online games and blockchain industries.

Master An, chief traffic expert of Mozidun, said: "Online games are a large-scale industry worth billions of dollars, but they are often attacked by targeted and high-traffic DDoS. Any service interruption may cause users to switch to competitors and damage the brand reputation. Every second of downtime will bring a lot of revenue losses to enterprises. Threats such as DDoS attacks cannot be ignored. Online game companies need to strengthen their awareness of network security and provide players with a good and stable online experience. "

Because the attack cost of the game industry is low, it is the protection cost of 1/N, and the attack and defense ends are extremely unbalanced. As the attacker's style of play becomes more and more complex and there are more and more attack points, the basic static protection strategy can't achieve good results, which aggravates this imbalance.

Secondly, the game industry has a short life cycle. A game takes half a year from birth to death. If it can't resist a big attack, it is likely to give up halfway. Hackers also aimed at this point and decided that as long as they launched an attack, the game company would definitely give a "protection fee".

Thirdly, the game industry requires high continuity, requiring 7*24 online, so if it is attacked by DDoS, the game business will easily cause a large number of players to lose. I have seen the number of players drop from tens of thousands to hundreds after the game company was attacked for 2-3 days, and even faced the consequences of the whole game going offline.

After deploying the Magic Shield DDoS protection solution, game companies and platforms can obtain enhanced multi-dimensional DDoS protection solutions to defend against complex attacks. This includes upgraded behavior-based UDP (User Datagram Protocol) attack protection measures. Online games usually rely on UDP to send and receive data. This protocol does not need the time-consuming and frequent "handshake" like other protocols such as TCP. However, many other attack defense solutions focus on rate-based large-capacity protection, especially in public clouds, lacking protection against UDP attacks.

In addition, DDoS attacks against the application layer or non-heavy traffic attacks that do not directly affect the public cloud network are usually not detected. These rate-based protections also lead to high false positives, which may make them inaccessible to ordinary users. Mo Zhedun's self-developed fingerprint protection engine for CC attacks can intelligently identify attacks, including non-heavy traffic attacks, pulse attacks and unknown zero-day attacks, according to multiple portrait access characteristics such as URL, frequency and behavior of visitors, with higher accuracy, while ensuring the lowest manslaughter rate and the best user experience.

"Solitary Sword", chief security consultant of Mozi Security, said: "DDoS attacks have become the most important and effective means to combat the game and blockchain industries. The company's self-built DDoS defense technology is not low, the cost is high, the construction period is uncontrollable, and the attack is difficult to trace. In the face of various difficulties, we can cooperate with security vendors with strong security protection capabilities to fill shortcomings in a short time and improve countermeasures to ensure the stable operation of the server. "

How to prevent DDOS by general firewall? Is it by rules, policies or something?

The prime minister must judge what kind of attack this is. DDoS is an attack against IP, while CC is an attack against web pages. DDoS can use hardware firewalls to filter attacks. The request of CC attack itself is a normal request, and the hardware firewall can't give him a good defense effect.

If the cloud servers used, such as Tencent Ali, have supporting high-defense services, Ali Yundun and Tencent Dayu, there should be no problem with general DDOS attacks, and high-defense servers above medium-sized attacks can cope. If you encounter CC, you have to be IP-proof.

Reserved knowledge solves the problem of tinkering around the edges, but it can't solve the fundamental pain point. At most, it is a guerrilla war with each other. Seek an orthodox solution and end it directly.

The following is the entrance of high-security server and high-security IP. If you want to know, fly there, and I won't copy and paste.

DDoS protection _BGP high protection _DDoS attack protection

BGP high defense IP

If the traffic continues, you can spend it with him and see who can't stand it first. After all, the other party has costs, and they are all playing with money.

By the way, you can also contact the customer service of the cloud service provider directly. Tencent's customer service response is still very rapid, and it is no problem to have certain technical support to solve unexpected situations for you.

What is cloud shield management?

It is a community shield based on cloud technology. It uses Alibaba Cloud's powerful cloud technology to effectively identify whether the published information is spam, supports automatic filtering and deletion of spam, and all operating systems automatically execute it, freeing your hands.

In addition, it supports the ability of automatic learning and human-computer recognition, and can automatically identify the unique content grading system of your website and the ordinary users or mounter users according to the daily operation of the webmaster.