|
|
Automation of DDoS Attack Mitigation
Nagy, Peter ; Podermański, Tomáš (referee) ; Grégr, Matěj (advisor)
The aim of this thesis is automation of DDoS attack mitigation. This thesis provides an overview of GNU/Linux network platforms and different approaches for their configuration. The aim is to select a platform that could be extended to automate DDoS mitigation. DDoS attack types are explained as well. Selected methods for DDoS mitigation are described in more detail such as Remote Triggered Black Hole and BGP Flowspec. Existing tools like DDoS Defender and FastNetMon are used to detect a DDoS attack. NETX was chosen as target implementation platform. To communicate with devices, API or BGP protocol with Flowspec extension are used.
|
|
|
Detection of Volumetric DoS and DDoS Attacks in Real Time on the L3 Network Layer
Škápik, Anton ; Grégr, Matěj (referee) ; Holkovič, Martin (advisor)
This bachelor thesis explores and implements capabilities of real-time DoS and DDoS detection. Leveraging NetFlow stream processing tool, the resulting product provides the ability to detect attacks within a few seconds and create rules to mitigate the attack. The rules are converted from an form of records into a flowspec filter that is distributed by BGP between the routers in the monitored network. The program was implemented and tested. The work is written in collaboration with Flowmon Networks a.s., using their proprietary applications for NetFlow record processing.
|
|
|
Detection of Volumetric DoS and DDoS Attacks in Real Time on the L3 Network Layer
Škápik, Anton ; Grégr, Matěj (referee) ; Holkovič, Martin (advisor)
This bachelor thesis explores and implements capabilities of real-time DoS and DDoS detection. Leveraging NetFlow stream processing tool, the resulting product provides the ability to detect attacks within a few seconds and create rules to mitigate the attack. The rules are converted from an form of records into a flowspec filter that is distributed by BGP between the routers in the monitored network. The program was implemented and tested. The work is written in collaboration with Flowmon Networks a.s., using their proprietary applications for NetFlow record processing.
|
|
|
Automation of DDoS Attack Mitigation
Nagy, Peter ; Podermański, Tomáš (referee) ; Grégr, Matěj (advisor)
The aim of this thesis is automation of DDoS attack mitigation. This thesis provides an overview of GNU/Linux network platforms and different approaches for their configuration. The aim is to select a platform that could be extended to automate DDoS mitigation. DDoS attack types are explained as well. Selected methods for DDoS mitigation are described in more detail such as Remote Triggered Black Hole and BGP Flowspec. Existing tools like DDoS Defender and FastNetMon are used to detect a DDoS attack. NETX was chosen as target implementation platform. To communicate with devices, API or BGP protocol with Flowspec extension are used.
|
guest ::
