无法追踪的电子邮件集群炸弹：基于代理的分布式拒绝服务攻击
Untraceable Email Cluster Bombs: On Agent-Based Distributed Denial of Service
摘要：
我们发现了一个漏洞，允许攻击者只使用标准脚本和代理对选定的受害者执行基于电子邮件的攻击。我们描述的攻击与其他已知形式的分布式拒绝服务（DDoS）攻击的区别在于，攻击者不需要以任何方式渗透网络-通常需要发动DDoS攻击。因此，我们将这种类型的攻击视为穷人的DDoS。这种攻击不仅容易发动，而且几乎不可能追溯到肇事者。随着我们的攻击的描述，我们证明了其破坏性的潜力（有限的和包含）的实验结果。我们通过描述攻击者如何通过淹没收件箱来禁用电子邮件帐户，来说明我们的攻击的潜在影响;阻止在线拍卖期间的竞争;通过在线存在来伤害竞争对手;中断对特定受害者的电话服务;在基于SMS的游戏中作弊;断开移动企业领导人与他们的网络的连接;以及破坏电子选举。最后，我们提出了一系列的对策，重量轻，不需要修改的基础设施，并可以逐步部署。
英文摘要：
We uncover a vulnerability that allows for an attacker to perform an email-based attack on selected victims, using only standard scripts and agents. What differentiates the attack we describe from other, already known forms of distributed denial of service (DDoS) attacks is that an attacker does not need to infiltrate the network in any manner -- as is normally required to launch a DDoS attack. Thus, we see this type of attack as a poor man's DDoS. Not only is the attack easy to mount, but it is also almost impossible to trace back to the perpetrator. Along with descriptions of our attack, we demonstrate its destructive potential with (limited and contained) experimental results. We illustrate the potential impact of our attack by describing how an attacker can disable an email account by flooding its inbox; block competition during on-line auctions; harm competitors with an on-line presence; disrupt phone service to a given victim; cheat in SMS-based games; disconnect mobile corporate leaders from their networks; and disrupt electronic elections. Finally, we propose a set of countermeasures that are light-weight, do not require modifications to the infrastructure, and can be deployed in a gradual manner.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
