Editing Denial-of-service attack (section)

===UPnP attack===
A UPnP attack uses an existing vulnerability in [[Universal Plug and Play]] (UPnP) protocol to get past network security and flood a target's network and servers. The attack is based on a DNS amplification technique, but the attack mechanism is a UPnP router that forwards requests from one outer source to another. The UPnP router returns the data on an unexpected UDP port from a bogus IP address, making it harder to take simple action to shut down the traffic flood. According to the [[Imperva]] researchers, the most effective way to stop this attack is for companies to lock down UPnP routers.<ref>{{Cite news|url=https://www.darkreading.com/new-ddos-attack-method-leverages-upnp/d/d-id/1331799|title=New DDoS Attack Method Leverages UPnP|work=Dark Reading|access-date=2018-05-29|language=en}}</ref><ref>{{Cite news|url=https://www.imperva.com/blog/archive/new-ddos-attack-method-demands-a-fresh-approach-to-amplification-assault-mitigation/|title=New DDoS Attack Method Demands a Fresh Approach to Amplification Assault Mitigation – Blog {{!}} Imperva|date=2018-05-14|work=Blog {{!}} Imperva|access-date=2018-05-29|language=en-US}}</ref>