Web Insecurity

Phlooding?!?!?!

July 22nd, 2005

According to AirMagnet, Phlooding is defined as “group of simultaneous but geographically distributed attacks that targets a business’s authentication or network log-in structure, with the goal of overloading its central authentication server.”

This is simply marketing hype. Phlooding in normal security vernacular is nothing more than a dDoS attack. How far will companies go? Claiming that it is a new zero-day attack type? That’s absured. People have been doing that kind of attack for years.

There claim that the attack “…creates a “flood” of authentication requests…”, sounds a lot like the definition of a DoS attack to me which states: “a type of attack on a network that is designed to bring the network to its knees by flooding it with useless traffic.”

It is a sad day when security companies attempt to fool there customers with ficticious “zero day” information in the hopes of getting a quick sale. You can read the entire hyped up article here.

Entry Filed under: Server Security