NANOG Meeting Presentation Abstract

DDoS Mitigation using BGP Flowspec
Meeting:	NANOG63
Date / Time:	2015-02-03 4:15pm - 5:00pm
Room:	Salon I
Presenters:	Speakers: Justin Ryburn, Juniper Networks Justin Ryburn is a Senior Systems Engineer at Juniper Networks. He holds an MBA and a MS in IT Management from Webster University as well and numerous industry certifications. Justin contributed content for Cyber Forensics (Auerbach Publishing, 2007). Prior to joining Juniper, Justin held various operations, engineering, and sales engineering positions over his 15-year career with companies such Savvis, Nortel, XO, and Charter.
Abstract:	The BGP Flow Specification defined in RFC 5575 gives network operators an additional tool to mitigate the effects of DDoS attacks on their network. In this talk, we will look at the previous tools available to operators for blocking DDoS attacks. We will then look at how BGP Flowspec aims to improve upon those methods. Finally, we will take a look at where BGP Flowspec is working and what needs to be improved to make this tool even more effective.
Files:	DDoS Mitigation using BGP Flowspec(PDF) DDoS Mitigation using BGP Flowspec
Sponsors:	None.

Back to NANOG63 agenda.

NANOG63 Abstracts

• Show All

• Operators and the IETF - What Next?
  Speakers:
  Chris Grundemann

• Common Carriage and the Open Internet
  Speakers:
  Christopher Yoo, U. of Pennsylvania Law School;

• Stewardship and Accountability for Internet Identifiers
  Speakers:
  John Curran

• RING SQA: blazing fast partial outage detection (free!)
  Speakers:
  Job Snijders, NTT Communications;

• The Resolvers We Use
  Speakers:
  Geoff Huston, APNIC;

• Recent BGP routing incidents - malicious or not
  Speakers:
  Andree Toonk, BGPMon.net;

• Network Integration Panel
  Moderators:
  Joe Provo, Google; Panelists:
  McGehee Games, CenturyLink; Steve Powell, Level3; Dave Siegel, Level 3 Communications; Richard A Steenbergen

• Network Integration Panel
  Moderators:
  Joe Provo, Google; Panelists:
  McGehee Games, CenturyLink; Steve Powell, Level3; Dave Siegel, Level 3 Communications; Richard A Steenbergen

• Network Integration Panel
  Moderators:
  Joe Provo, Google; Panelists:
  McGehee Games, CenturyLink; Steve Powell, Level3; Dave Siegel, Level 3 Communications; Richard A Steenbergen

• Network Integration Panel
  Moderators:
  Joe Provo, Google; Panelists:
  McGehee Games, CenturyLink; Steve Powell, Level3; Dave Siegel, Level 3 Communications; Richard A Steenbergen

• Network Integration Panel
  Moderators:
  Joe Provo, Google; Panelists:
  McGehee Games, CenturyLink; Steve Powell, Level3; Dave Siegel, Level 3 Communications; Richard A Steenbergen

• Automatically Build, Test and Deploy Your Network Configurations
  Speakers:
  Carlos Vicente, Dyn Inc.;

• BCOP Publication Options
  Speakers:
  Cathy Aronson, Daydream Imagery LLC.;

• Datacenter Track
  Moderators:
  Martin Hannigan, Akamai Technologies, Inc.;

• DNS Track
  Moderators:
  Duane Wessels, VeriSign;

• Security Track
  Moderators:
  John Kristoff, Team Cymru;

• Beyond the Range of the Moment: Ethical Response to Cybercrime
  Speakers:
  David Dittrich, University of Washington; Katherine Carpenter

• Beyond the Range of the Moment: Ethical Response to Cybercrime
  Speakers:
  David Dittrich, University of Washington; Katherine Carpenter

• Public Policy Approaches to IPv4-IPv6 Transition
  Speakers:
  Lee Howard, Time Warner Cable;

• DDoS Mitigation using BGP Flowspec
  Speakers:
  Justin Ryburn, Juniper Networks;

• Approaches for DDoS — an ISP Perspective
  Speakers:
  Barry Dykes, ViaWest Inc; Ognian Mitev, ViaWest, Inc.;

• Approaches for DDoS — an ISP Perspective
  Speakers:
  Barry Dykes, ViaWest Inc; Ognian Mitev, ViaWest, Inc.;

• Real-world Network Automation
  Moderators:
  Matt Peterson, Cumulus Networks; Panelists:
  Bronwyn Lewis, Packet Clearing House; Carlos Vicente, Dyn; Jérôme Fleury, CloudFlare;

• Real-world Network Automation
  Moderators:
  Matt Peterson, Cumulus Networks; Panelists:
  Bronwyn Lewis, Packet Clearing House; Carlos Vicente, Dyn; Jérôme Fleury, CloudFlare;

• Real-world Network Automation
  Moderators:
  Matt Peterson, Cumulus Networks; Panelists:
  Bronwyn Lewis, Packet Clearing House; Carlos Vicente, Dyn; Jérôme Fleury, CloudFlare;

• Real-world Network Automation
  Moderators:
  Matt Peterson, Cumulus Networks; Panelists:
  Bronwyn Lewis, Packet Clearing House; Carlos Vicente, Dyn; Jérôme Fleury, CloudFlare;

• Selective Blackholing - How to Use & Deploy
  Speakers:
  Job Snijders, NTT Communications;

• Assessing Internet Resilience at a Key Node
  Speakers:
  Michael Thompson, Argonne National Laboratory;

• Migrating AmLight from legacy to SDN: Challenges, Results and Next Steps
  Speakers:
  Jeronimo Bezerra, Florida International University;

• Why Operators need Transport SDN (Not just another SDN presentation)
  Speakers:
  Peter Landon, BTI Systems;

• RIPE Lessons from RPKI adoption
  Speakers:
  Alex Band, RIPE NCC;

• ISP Interconnection and its Impact on Consumer Internet Performance
  Speakers:
  Collin Anderson, Measurement Lab;