Warding against the Dark Arts: Crafting a Defense Strategy against Botnet DDoS Attacks

Thursday, March 23, 2023 - 9:50 am10:35 am

Shirleen Sharma and Aaron Heady


Surviving a large-scale DDoS attack is usually not a requirement when designing a service. Yet, the ability to do so often translates into gains in both performance and service hardening and requires an intimate understanding of real-user traffic.

DDoS requires a defense-in-depth attitude to engineering our services; for sophisticated attacks, just depending on CDNs (almost all of them have some form of capability) gives some respite, but still hurts a 4-nines availability target.

This talk is for the SRE who has just begun thinking about large-scale DDoS mitigation and aims to provide a structure of how to create a comprehensive defense strategy.

Shirleen Sharma[node:field-speakers-institution]

Having worked on critical failover systems, resource compilers and high performance C#, Shirleen loves to dive deep into ambiguous problems as a software engineer at Microsoft. When she's not off slaying dragons at work, she creates accessible STEM education programs and loves to read.

Aaron Heady[node:field-speakers-institution]

Aaron is a Reliability Engineer recently with Microsoft who focuses on CDN/DNS performance, availability, and traffic routing. 20+ years in tech, let’s talk! When not working, he’s probably snowboarding, sewing, or cooking.

Open Access Media

USENIX is committed to Open Access to the research presented at our events. Papers and proceedings are freely available to everyone once the event begins. Any video, audio, and/or slides that are posted after the event are also free and open to everyone. Support USENIX and our commitment to Open Access.

@conference {286290,
author = {Shirleen Sharma and Aaron Heady},
title = {Warding against the Dark Arts: Crafting a Defense Strategy against Botnet {DDoS} Attacks},
year = {2023},
address = {Santa Clara, CA},
publisher = {USENIX Association},
month = mar

Presentation Video