Later archive addition

CDN Judo: Breaking the CDN DoS Protection with Itself

Run Guo, Weizhong Li, Baojun Liu, Shuang Hao, Jia Zhang, Haixin Duan, Kaiwen Sheng, Jianjun Chen and Ying Liu · NDSS Symposium

Weaknesses in how CDNs forward requests let an attacker turn the CDN's own capacity against the site it shields: HTTP/2 request conversion and pre-POST forwarding exhaust CDN-to-origin bandwidth and origin connection limits, and because some vendors forward from a few long-lived IPs, cutting those connections degrades global availability.

Record

Researcher

Run Guo, Weizhong Li, Baojun Liu, Shuang Hao, Jia Zhang, Haixin Duan, Kaiwen Sheng, Jianjun Chen and Ying Liu

Published by

NDSS Symposium

In the archive

• Added to the 2020 archive after the original list was published

Related sources

• Talk recording
• Talk recording

Tags

• dos
• cdn
• http2
• http
• reverse-proxy
• measurement-study

This page is the archive's own catalogue record. The research is the work of Run Guo, Weizhong Li, Baojun Liu, Shuang Hao, Jia Zhang, Haixin Duan, Kaiwen Sheng, Jianjun Chen and Ying Liu, first published at the original source. Preserved copies are kept so the citation survives its host.