Dear colleagues, Please see this new article on RIPE Labs by Claude Fachkha: This work proposes a novel approach to infer and characterise Internet-scale DNS Distributed Reflection Denial of Service (DRDoS) attacks by leveraging the darknet space. The aim of this work is to extract useful information related to DRDoS activities such as intensity, rate and geo-location in addition to various network-layer and flow-based insights. https://labs.ripe.net/Members/claude_fachkha/inferring-distributed-reflectio... Kind regards, Mirjam Kuehne RIPE NCC