Mirai Botnet & IoT DDoS Defense

In late 2016, the Mirai botnet emerged as one of the most significant threats to internet infrastructure, leveraging compromised Internet of Things (IoT) devices to launch massive distributed denial-of-service (DDoS) attacks. This research, conducted at the University of Technology Sydney (UTS), analyzes the Mirai malware's architecture, its exploitation of weak default credentials on IP cameras, DVRs, and routers, and the resulting outages against high-profile targets including Krebs on Security and Dyn DNS.

The study evaluates traditional mitigation strategies and introduces Cloudflare Orbit as an innovative virtual patching mechanism. Orbit allows vulnerable IoT devices to be protected at the edge without requiring firmware updates or heavy local compute — effectively shielding devices that manufacturers have abandoned.