What we know
This paper studies the DNS amplification attack ecosystem through a passive detection methodology at Internet exchange points (IXPs), combined with other measurement sources. According to the authors, IXPs and honeypots observe largely disjoint sets of attacks, and the study examines the effectiveness of observed attacks and the behavior of a dominant attacking entity.
Evidence limits
This entry is based solely on the published title and abstract; the full text has not been reviewed and the methodology or findings have not been independently verified.
Reviewed: author abstract. Full-text results were not analyzed.
Sources and provenance
- The Far Side of DNS Amplification: Tracing the DDoS Attack Ecosystem from the Internet Core
abstract · 2026-10-04
Reviewed: 2026-10-04. This record may change when new evidence is found.