BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.denog.de//denog18//speaker//RDR78U
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-denog18-XBCBZT@cfp.denog.de
DTSTART;TZID=CET:20261117T141000
DTEND;TZID=CET:20261117T144000
DESCRIPTION:DDoS defense strategies must evolve because modern botnet campa
 igns combine high-volume\, direct-path pressure with stealthier tailored a
 ttack components that attempt to overload and evade mitigation systems. \n
 \nIn the past\, most DDoS attacks were easier for ISPs to identify and blo
 ck. The hardest cases were botnet-based Layer 7 attacks because they were 
 more difficult to detect and mitigate. \n\nSuccessfully blocking DDoS atta
 cks today requires more than the techniques that worked in the past. Over 
 the past months\, botnet size and firepower have increased dramatically. T
 hese botnets now drive some of the largest and most effective attacks\, no
 t only against individual applications but also against entire network inf
 rastructures\, cloud providers\, and CDNs. \n\nAt the end of 2025\, we obs
 erved record-breaking attacks. This talk explains why we believe those att
 acks happened\, why they continue\, and what they reveal about the evoluti
 on of botnet-driven DDoS campaigns. \n\nMulti-terabit attacks have become 
 much more common\, but it is not just the volume of DDoS traffic that is t
 aking down web sites and other targets around the world. The real problem 
 is the tailored\, targeted\, and dynamic attack components that knock serv
 ers offline while remaining below the visibility threshold of many traditi
 onal defenses.  \nToday’s large-scale\, direct-path attacks increasingly
  include multiple attack vectors\, blending volumetric\, state-exhaustion 
 and application-layer components. These botnet-based attacks are designed 
 to overload mitigation capabilities and resources.  \n  \nThis talk explai
 ns what enabled the expansion of botnets behind today’s attack campaigns
  and where these new bots are located. For network operators\, this matter
 s because these bots now require inbound\, outbound\, and cross-bound DDoS
  detection and mitigation.  \nThese insights are based on ATLAS\, our worl
 dwide DDoS monitoring system.  \nAttendees will leave with a clearer under
 standing of why botnet-driven DDoS campaigns now demand mitigation strateg
 ies that account for visible volumetric pressure and lower-profile attack 
 components at the same time.
DTSTAMP:20261023T235137Z
LOCATION:Saal A
SUMMARY:The New Botnet Era: Rethinking Your DDoS Strategy - Stefan Meinders
URL:https://cfp.denog.de/denog18/talk/XBCBZT/
END:VEVENT
END:VCALENDAR