The post-quantum EO is an important milestone. Now it’s time to get to work
The new post-quantum executive order sets a 2030 migration deadline and establishes a powerful foundation for post-quant
#DDoS
共收录 123 条相关情报。
← 返回所有主题Guides and tutorials
Guides and tutorials
Events and workshops
Events and workshops
Anycast Agility: Network Playbooks to Fight DDoS.
IP anycast 被广泛应用于 DNS 和内容分发网络（CDN）等关键服务，以提供应对分布式拒绝服务（DDoS）攻击的容量。当遭受 DDoS 攻击时，运营商通常需要在不同 anycast 站点之间重新分配流量，以利用未用或更大容量的站点
Build your own vulnerability harness
We break down the technical architecture behind our multi-stage vulnerability discovery harness and automated triage loo
Jaqen: A High-Performance Switch-Native Approach for Detecting and Mitigating Volumetric DDoS Attacks with Programmable Switches.
该论文提出 Jaqen，一种基于可编程交换机（如 P4/Intel Tofino）的交换机原生方案，用于检测和缓解容量型 DDoS 攻击。传统 DDoS 缓解方案通常依赖集中式清洗中心或服务器，存在高延迟、带宽浪费和扩展性不足等问题。Jaq
White papers, ebooks, videos, product briefs
White papers, ebooks, videos, product briefs
Customer stories
Customer stories
Training and certifications
Training and certifications
Akamai Security Intelligence Group (SIG)
Akamai Security Intelligence Group (SIG)
State of the Internet (SOTI) reports
State of the Internet (SOTI) reports
Start-up programs
Start-up programs
Defend against frontier cyber models: Cloudflare's architecture as customer zero
In our post about Project Glasswing, we made the argument that the architecture around a vulnerability matters more than
Turning Cloudflare’s threat indicators into real-time WAF rules
Cloudflare customers can now use Cloudforce One threat intelligence directly within the WAF to block high-risk traffic.
Bot and Abuse Protection
Bot and Abuse Protection
Mew: Enabling Large-Scale and Dynamic Link-Flooding Defenses on Programmable Switches.
链路泛洪攻击（LFA）通过汇聚大量低速率正常流量，切断目标服务器的网络连接，且攻击者能动态调整策略，传统集中式防御系统难以本地高效压制恶意流量。新兴的可编程交换机虽能将防御移至靠近目标链路的位置，但其有限的资源和缺乏运行时重配置支持限制了在
Intelligent Detection and Mitigation of Carpet-Bombing DDoS Attacks in SDN Using Retrieval-Augmented Generation and Large Language Models
软件定义网络（SDN）因其集中控制架构而面临分布式拒绝服务（DDoS）攻击的严重威胁，特别是地毯式轰炸（Carpet-Bombing）DDoS攻击，这种攻击将恶意流量分散到多个目标以逃避传统检测机制。本文提出了一种基于检索增强生成（RAG）
Project Glasswing: what Mythos showed us
In recent weeks, we pointed Mythos and other security-focused LLMs at live code across critical parts of our infrastruct
Program overview
Program overview
Can a Single Message Paralyze the AI Infrastructure? The Rise of AbO-DDoS Attacks through Targeted Mobius Injection
该论文提出了一种针对基于大语言模型（LLM）的智能体系统的新型攻击范式，称为 Mobius Injection，可引发基于智能体的面向服务的分布式拒绝服务（AbO-DDoS）攻击。作者发现智能体逻辑中存在的结构漏洞“语义闭合”（Semant