OWASP Monthly Meeting - August 26, 2015

Topic: Scourge of the Internet since the late 90s, DDoS attacks have grown in magnitude and sophistication. This talk goes over basic symptoms, motivations, evolving trends in attack vectors and actors, pluggable amplification vectors, DIY hardening and mitigation architectures, and classifications of vendors in the mitigation space.

Speaker: Chris Holland

Speaker Bio:

With more than 18 years in the trenches building web applications across a variety of technology stacks, Chris Holland is on a perpetual quest to overcome the many challenges of engineering sustainable software and systems resilient to ever-growing internal and outside pressures. Chris leads a Software Engineering Team at TriNet Cloud, in Santa Monica, and has held Sr. Engineering and Leadership roles for publicly-traded companies such as EarthLink and Internet Brands, as well as smaller companies, each presenting unique challenges driving learning and innovation. Chris is also currently the Founder of HiveWind, LLC, specializing in the research and development of DDoS mitigation solutions.

Thanks to "Verizon Digital Media" our Food Sponsor this month!

Verizon DEFEND focuses on your website’s uptime by protecting you from distributed denial-of-service (DDoS), web application and direct-to-customer origin attacks.

Our proprietary approaches and revolutionary technology enable us to identify and mitigate DDoS attacks within two minutes. Our intelligent, real-time monitoring and detection mitigates 99 percent of DDoS attacks within 60 seconds of identification. Anti-DDoS protection is built on a reverse-proxy architecture and features port lock down.

Origin cloaking offers additional security through origin firewalling, ensuring that only our Internet Protocol (IP) addresses are allowed to contact the consumer origin.

Comprehensive, cloud-based Web Application Firewall (WAF) is deployed through all of Verizon’s CDN Points of Presence (PoPs) and helps protect your web applications and sites against application level attacks.