Trends: Use
- Less emphasis on forged packet characteristics
-
- size and distribution of DDoS makes response difficult
- overwhelming number of sources in DDoS attack
- sources often cross multiple AS boundaries
- high bandwidth consumption is easy; no need for fancy packets
-
- increase in attacks using legitimate traffic
- mixes with other traffic
- harder to filter/limit