arianabuilds
commented
2 months ago Entry Summary for HACK SIV @ DEF CON 2024
Thanks again for participating! This submission earned $272.11 from SIV and $82.88 from the Public Vote, for a total of $354.99.
Here's what we noted in our evaluation:
What's interesting about this submission
- Novel attack
- Mostly out of our control, attacking the network level, not application
- Could attack availability of server, via black holing?
- Could lead to server impersonation, via BGP attack on DNS?
- Claimed that it could be carried out very cheaply, if you know the right people
What takes away from it
- Few details submitted.
- Mostly an availability attack, which we said was out-of-scope for this particular contest.
- Seems pretty detectable (the whole world sees it?), and remediable if it takes place.
- Some mitigation options already available (CDN with hundreds of geographically nearby peers)
- More mitigations being worked on BGPsec
- Can also be discovered (and then fixed) by a post-election RLA.
Issue to track getting paid: https://github.com/siv-org/hack.siv.org/issues/6
More details still needed for proper investigation.
Some background on a big attack that took place in 2010: arstechnica.com/information-technology/2010/11/how-china-swallowed-15-of-net-traffic-for-18-minutes