Dissertation > Excellent graduate degree dissertation topics show

The Defense and Detection Method of the DDoS Attack of Application Layer

Author: XuLin
Tutor: HeDeQuan
School: Shanghai Jiaotong University
Course: Information and communication systems
Keywords: application DDoS attack Clients Web servers Threshold
CLC: TP393.08
Type: Master's thesis
Year: 2013
Downloads: 119
Quote: 0
Read: Download Dissertation

Abstract


With the fast development of the network,the world has come into theera of information.What isalmost unbelievable to us is to imagine a worldwithout the network. However, the network also encountered manythreats, and it is more difficult to detect these threats as well as to defendthem.This paper discusses a way to defend and detect the application DDoSattack based on the web servers. Its objection is to lower the threats to theapplication DDoS attack based on the web servers.As far as the DDoS attack is concerned, it includes mainly about theapplication DDoS attack and network DDoS attack. The threats caused bythe network DDoS attack has been lowered because there has been existsmany new solutions. Nowadays, the application DDoS attack has donethe greater harm to the safety of the network. This new attack way hasmore dangerous, because the application DDoS attack behaves the sameas the ordinary users do, which results that it is more difficult to defendthe application DDoS attack if we can not distinguish the abnormal andnormal behaviors at first stage.This paper discusses the principle of the DoS and DDoS, and alsodiscuss the attack way the network DDoS attack behaves, for example,SYN Flooding, IP Spoofing, Teardrop and so on, and discuss the traits ofthe network DDoS attack.Later, this paper discusses the application DDoS attack and thedifferences between network DDoS attack and application DDoS attack indetail. The application DDoS attack has three main ways, including request Flooding, Asymmetric attack and the low-speed attack. In essence,the most common attack way is the resource exhaust of the hosts.Because the HTTP protocol is the main communication protocol ofthe Web servers, so this paper focuses on the HTTP protocol so as tounderstand the process of the sessions between two different applicationlayers better.Nowadays, the application DDoS attack just focuses on the safety ofthe servers and drag the users into the blacklist once the users’ behaviorsare thought to be abnormal, so this paper posts up a defending way whichbalances the need of clients and the servers, and confirms whether theseuses are attackers or not by the way of identifying code, and permits theusers to access the servers with some restrictions if the clients has notreached the Threshold.Finally, we test the defending way by the tools of Httperf andAutobench, the test could be done under the circumstance of Lamp,Libpcap should be taken to capture the network packets, these tools cansimulate the application DDoS attack very well. And the results of the testhave proved that the defending way has good performance.

Related Dissertations

  1. Resrarch on Multisignatures and Multisigncryptions from Identity-based,TN918.1
  2. Research on Spread Spectrum Code Acquisition of Double Threshold Based on Sliding Correlator,TN914.42
  3. Performance Analysis of Anti-Multipath Capability in DSSS System and Study on the Compensation Methods,TN914.42
  4. Citrus Image Segmentation Based on Genetic Algorithm,TP391.41
  5. Macroinvertebrate Assemblages and Its Application in the Water Management,X824
  6. Bioavailability of Phthalic Acid Esters in Different Types of Soil-plant Systems,X53
  7. Differences in different populations compared proprioception and Brain Mechanisms,B845
  8. Mobile WSN data collection based on the virtual cluster head Strategy,TP212.9
  9. Research on Tracking and Registration Algorithm in Augmented Reality,TP391.9
  10. The Research of Medical Ultrasound Image Denosing Algorithms Based on Multiscale Geometric Analysis,TP391.41
  11. Dynamical Multi-threshold Template Created and Application on DSP Image Processing,TP391.41
  12. Threshold proxy signature and its extension,TN918.1
  13. Design and Implementation of Wireless Mesh Network Testbed Based on Network Cards,TN929.5
  14. Research of Fault-Tolerant Technology on Masterslave Interconnection Bus of Satellite-based Parallel System,TP302.8
  15. The Detection of Multiple Damages in the Structures Based on Genetic Algorithms and Topology Optimization,O346.5
  16. On the Risk Models with Tax,F812.42
  17. Alkali Metal Rydberg Atoms in Strong External Fields,O562.3
  18. Fe ( 3 ) ions on the performance impact of KDP crystal,O734
  19. Study on Application of Wavelet Denoising in Terahertz Time-Domain Specstroscopy,O441.4
  20. Habitation Extraction and Edge Optimization,P237
  21. Automatic Registration of Terristrial Lidar Data Using Planar Targets,P225.2

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net  Mobile