|
|
Development and testing of a module for HTTP/2 in the Apache JMeter program
Szymutko, Roman ; Martinásek, Zdeněk (referee) ; Šeda, Pavel (advisor)
This thesis focuses on the development of new modules for the software Apache JMeter. These modules implement an HTTP/2 protocol, which is not yet globally adopted. This means that it is not supported on all applications and servers, including Apache JMeter. These new modules add options for testing the new version of HTTP and are meant for simulating traffic on a server targeted by a Denial of Service attack. These modules allow an execution of an HTTP/2 flood attack and a Slow Read attack. The theoretical chapter of this thesis describes technical details about HTTP, JMeter principles, its alternatives, and also classical DoS and slow DoS attacks. The main advantage of Slow DoS attacks is low usage of network capacity for their function. Lastly in this text, there are also described two main components in depth: the newly developed modules and the web server used for testing the modules' functionality.
|
|
|
Intrusion prevention system for slow DoS attacks
Lanžhotský, Karel ; Gerlich, Tomáš (referee) ; Sikora, Marek (advisor)
This master's thesis deals with the matter of detection and prevention of flood and slow denial of service attacks. Output of this thesis is software capable of detection five attacks and five slow attack based on their signatures. At the beginning of the thesis there is an introduction to protocols used in network communication, especially these working on transport and application layer. Included in this thesis in an introduction into the matters of denial of service attacks, their description and differences between mentioned attack types. After that there is description of approaches to detection and prevention techniques to the mentioned attacks. At the end thesis is dedicated to the process of making and testing of the devised software.
|
|
|
Slow Dos Attacks Detection And Mitigation
Sikora, Marek
This article investigates the detection and mitigation methods against Slow DoS (Demand of Service) attacks. This research is focused on Slowloris, Slow POST, Slow Read, and Apache Range Header attacks. Detection methods are based on network traffic analysis and anomalous traffic monitoring. When the attack is detected, the attacker is blocked and web server resources are released. Methods are implemented as an intrusion prevention system software.
|
guest ::
