LSProxy: A Low Bandwidth Tolerable Solution to Protect Systems Against Low and Slow DoS Attacks;LSProxy: A Low Bandwidth Tolerable Solution to Protect Systems Against Low and Slow DoS Attacks

NCUIR > College of Electrical Engineering & Computer Science > Graduate Institute of Computer Science and Information Engineering > Electronic Thesis & Dissertation > Item 987654321/88315

Please use this identifier to cite or link to this item: https://ir.lib.ncu.edu.tw/handle/987654321/88315

Title:	LSProxy: A Low Bandwidth Tolerable Solution to Protect Systems Against Low and Slow DoS Attacks;LSProxy: A Low Bandwidth Tolerable Solution to Protect Systems Against Low and Slow DoS Attacks
Authors:	胡傳恩;Hu, Chuan-En
Contributors:	資訊工程學系
Keywords:	阻斷服務攻擊;慢速連線包容力;反向代理伺服器;Slow HTTP DoS;Distributed Denial of Service (DDoS);DDoS Mitigation;Low Bandwidth Tolerable;Reverse Proxy
Date:	2022-01-28
Issue Date:	2022-07-13 22:46:20 (UTC+8)
Publisher:	國立中央大學
Abstract:	Low and slow DoS attack 是一種網路應用層的阻斷服務攻擊（DoS）；它利用的是傳輸速率很慢的封包，以達成占用伺服器連線資源的目的。該攻擊具有低網路流量以及不需太多資源即可發動的特性，因此難以偵測與防禦；即便針對慢速連線進行阻擋，也恐誤傷合法的使用者。本篇論文提出了一個能保護 HTTP 伺服器免於此攻擊、不需伺服器額外調整，且對於連線速率較慢的使用者有更好包容力的解決方案。實驗顯示其能成功保護 Apache 以及 Nginx 伺服器。;Low and slow DoS attack (LSDoS) is a kind of application layer denial-of-service (DoS) attack, which utilizes slow-sending packets in order to drain server′s connection resources. This kind of attack has low traffic and requires less resources to mount, thus making it hard to detect and mitigate. By blocking slow-rate connections, we might also block legitimate users. In this paper, our proposed solution, which is tolerable to slow-rate clients, can protect HTTP servers from LSDoS, without the need of modifying the server. Evaluation results show that it can successively protect Apache as well as Nginx servers.
Appears in Collections:	[Graduate Institute of Computer Science and Information Engineering] Electronic Thesis & Dissertation

Files in This Item:

File	Description	Size	Format
index.html		0Kb	HTML	181	View/Open

社群 sharing

Loading...