LSProxy: A Low Bandwidth Tolerable Solution to Protect Systems Against Low and Slow DoS Attacks;LSProxy: A Low Bandwidth Tolerable Solution to Protect Systems Against Low and Slow DoS Attacks

NCU Institutional Repository > 資訊電機學院 > 資訊工程研究所 > 博碩士論文 > Item 987654321/88315

jsp.display-item.identifier=請使用永久網址來引用或連結此文件: http://ir.lib.ncu.edu.tw/handle/987654321/88315

题名:	LSProxy: A Low Bandwidth Tolerable Solution to Protect Systems Against Low and Slow DoS Attacks;LSProxy: A Low Bandwidth Tolerable Solution to Protect Systems Against Low and Slow DoS Attacks
作者:	胡傳恩;Hu, Chuan-En
贡献者:	資訊工程學系
关键词:	阻斷服務攻擊;慢速連線包容力;反向代理伺服器;Slow HTTP DoS;Distributed Denial of Service (DDoS);DDoS Mitigation;Low Bandwidth Tolerable;Reverse Proxy
日期:	2022-01-28
上传时间:	2022-07-13 22:46:20 (UTC+8)
出版者:	國立中央大學
摘要:	Low and slow DoS attack 是一種網路應用層的阻斷服務攻擊（DoS）；它利用的是傳輸速率很慢的封包，以達成占用伺服器連線資源的目的。該攻擊具有低網路流量以及不需太多資源即可發動的特性，因此難以偵測與防禦；即便針對慢速連線進行阻擋，也恐誤傷合法的使用者。本篇論文提出了一個能保護 HTTP 伺服器免於此攻擊、不需伺服器額外調整，且對於連線速率較慢的使用者有更好包容力的解決方案。實驗顯示其能成功保護 Apache 以及 Nginx 伺服器。;Low and slow DoS attack (LSDoS) is a kind of application layer denial-of-service (DoS) attack, which utilizes slow-sending packets in order to drain server′s connection resources. This kind of attack has low traffic and requires less resources to mount, thus making it hard to detect and mitigate. By blocking slow-rate connections, we might also block legitimate users. In this paper, our proposed solution, which is tolerable to slow-rate clients, can protect HTTP servers from LSDoS, without the need of modifying the server. Evaluation results show that it can successively protect Apache as well as Nginx servers.
显示于类别:	[資訊工程研究所] 博碩士論文

文件中的档案:

档案	描述	大小	格式	浏览次数
index.html		0Kb	HTML	73	检视/开启

在NCUIR中所有的数据项都受到原著作权保护.

社群 sharing

数据加载中.....