Ask ASERT: What is Carpet Bombing

Have a question? Submit yours to askasert@netscout.com.
Roman Lara, Principal Security Analyst on the ASERT team at NETSCOUT, discusses the underpinnings of Carpet Bombing #DDoSAttacks and why they are a serious threat.
In a military setting, carpet bombing refers to the barrage of a large area with explosives intended to cause widespread damage. In a #DDoS sense, carpet bombing targets an entire IP range, instead of the typical single host targeted by a traditional DDoS attack, making it harder for conventional detection mechanisms to alert or trigger.
These attacks are more difficult to detect and defend against, as the target IP address and attack vector is constantly changing.
We are seeing an increase in carpet bombing attacks, as well as the types of traffic seen in carpet bombing, notably TCP Reflection/Amplification.