[BCOP] Best Practices for DDoS Mitigation

[Lucimara Desidera]

Hi Everyone,

CERT.br released Today a document with best practices to detect,
analyse and mitigate DDoS Attacks:

* Recomendações para Melhorar o Cenário de Ataques Distribuídos de
Negação de Serviço (DDoS)
http://www.cert.br/docs/whitepapers/ddos/

The document is in Portuguese, but we wanted to share anyway, as
probably most of the Spanish speakers will be able to understand the
concepts and tips.

The document covers both handling a DDoS attack and preventing your
network from being abused to perpetrate a DDoS attack against other
organizations.

The topics are broken down into these areas:

- Main targets and motivations for DDoS attacks;

- How DDoS attacks are perpetrated;

- Types of DDoS attacks;

- How to stop your network from being abused to attack others
(includes amplification, vulnerable Web applications and
botnets);

- How to handle DDoS attacks, including preparation, detection,
analysis, mitigation and post mortem.

Hope this information can be useful to the community.

-- 
Best regards,

Lucimara Desiderá
CERT.br/NIC.br
http://www.cert.br/