Countermeasures against large-scale reflection DDoS attacks using exploit IoT devices

With the of utilizing IoT devices increasing recently, such devices are being infected with malicious codes and being used to carry out DDoS attacks. In particular, there have been cases of large-scale DDoS reflex attacks of 100GB or more using IoT devices such as wireless sharing devices, CCTVs and smart cars. There is a vulnerability that is being exploited for attacks through Simple Service Discovery Protocol (SSDP) to search for IoT devices. This study examines different types of IoT devices used in DDoS attacks, and conducts experiments in which reflection DDoS attacks are carried out on IoT devices in order to measure the attack threat levels. This study also suggests methods that IoT service operators can employ to remove IoT device vulnerabilities, as well as effective countermeasures that Internet service operators can apply to address reflection DDoS attacks that exploit IoT devices.

Automated summary

With the increasing use of IoT devices, they are becoming targets for DDoS attacks, particularly through vulnerabilities in protocols like SSDP. This study examines various IoT devices used in DDoS attacks and conducts experiments to measure the threat levels, while also suggesting methods for IoT service operators to remove vulnerabilities and for Internet service operators to counter reflection DDoS attacks.