DDoS Never Dies? An IXP Perspective on DDoS Amplification Attacks

DDoS attacks remain a major security threat to the continuous operation of Internet edge infrastructures, web services, and cloud platforms. While large body research focuses on detection protection, date we ultimately failed eradicate altogether. Yet, landscape attack mechanisms is even evolving, demanding an updated perspective in wild. In this paper, identify up 2608 amplification at single day by analyzing multiple Tbps traffic flows IXP with rich ecosystem different networks. We observe prevalence well-known protocols (e.g., NTP, CLDAP), which should no longer exist given established mitigation strategies. Nevertheless, they pose largest fraction within our observation witness emergence using recently discovered OpenVPN, ARMS, Ubiquity Discovery Protocol). By impact core infrastructure, show that can overload backbone-capacity filtering approaches prior work omit 97% traffic.