Offloading Service for DDoS (or DoS) attacks

erpadmin

Please forgive me if this isn't the right place to ask, but I was watching the LearnKey videos on Security+ and as the instructor was talking about DDoS, he said the only real way to ensure the organization isn't hit is by using an offloading service?

Anyone use one in their organization? What would you *really* do in the event a DDoS or DoS was occuring? I'm very curious and figured this would be a great place to ask.

dynamik

It comes down to having more resources (bandwidth, processing power, etc.) than what's being thrown at you. For example, if you offload a website that's normally hosted on a T1 to a T3, it's going to be ineffective if you have 100s of Mbps or 1+ Gbps thrown at you.

Here's an interesting article for you: http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=214501208