Craig A. Huegen <chuegen@cisco.com>
Network-Based Denial of Service Attacks
SANS ‘98     14
Prevention Techniques
•Technical help tips for Cisco routers
•Unicast RPF checking
•Interprovider Cooperation
Stories from the field
Network Operations Centers should publish proper procedures for getting filters put in place and tracing started






•Cisco bugfixes which address some of the problems related to protection against Denial of Service attacks:
•BugID CSCdj35407 - “fast drop” ACL code - integrated in 11.1(14)CA
•BugID CSCdj35856 - ACL logging throttles - integrated in 11.1(15)CA