Filtrační jednotka pro eliminaci DDoS útoků s využitím komoditního hardware

English title

System for DDoS attack mitigation using commodity hardware

Type

functional specimen

License

In order to use the result by another entity, it is always necessary to acquire a license

License Fee

The licensor requires a license fee for the result

Authors

Nagy Peter, Ing. (CIS - Sítě)
Grégr Matěj, Ing., Ph.D. (DIFS)
Podermański Tomáš, Ing. (CIS ‒ Infrastructure)

Keywords

DDoS, security, BGP Flowspec, NetX, open platform, API, 40Gbit, 100Gbit

Description

Prototype system for detection and mitigation of volumetric DDoS attacks. The implementation of the prototype is based on telecom operators requirements to have a system built on an open platform and hardware. The prototype allows integration with the currently used DDoS detection systems, information export using API, and control DDoS traffic filtering using the BGP Flowspec protocol.

Location

https://www.dropbox.com/sh/cp5esofp0q7xlik/AACLGX0lLkWTlM3yt44j58BSa?dl=0

Projects

Integrated platform for analysis of digital data from security incidents, MV, Bezpečnostní výzkum České republiky 2015-2020, VI20172020062, 2017-2020, running

Research groups

NES@FIT - Networks and distributed systems research group (RG NES@FIT)

Departments

Department of Information Systems (DIFS)