Thesis Details
Potlačení DDoS útoků zneužívajících fragmentaci paketů
English title
Mitigation of DDoS Attacks Exploiting Packet Fragmentation
Language
Czech
Abstract
This bachelor's thesis deals with the development of new mitigation strategies that are designed to suppress DDoS attacks that exploit packet fragmentation. It analyses fragmented traffic primarily emphasizing the order of fragmented packets. Based on the result of the analysis, it implements a new heuristic method for port numbers inference. The work also measures the latency and throughput of newly implemented functionalities. All new methods are integrated in a project developed by the CESNET association.
Keywords
Packet fragmentation, Exploiting packet fragmentation, Mitigation strategies, Ports inference, DDoS, DDoS mitigation
Department
Degree Programme
Information Technology
Files
Status
defended, grade B
Date
10 July 2020
Reviewer
Committee
Ryšavý Ondřej, doc. Ing., Ph.D. (DIFS FIT BUT), předseda
Grézl František, Ing., Ph.D. (DCGM FIT BUT), člen
Hradiš Michal, Ing., Ph.D. (DCGM FIT BUT), člen
Smrčka Aleš, Ing., Ph.D. (DITS FIT BUT), člen
Vašíček Zdeněk, doc. Ing., Ph.D. (DCSY FIT BUT), člen
Grézl František, Ing., Ph.D. (DCGM FIT BUT), člen
Hradiš Michal, Ing., Ph.D. (DCGM FIT BUT), člen
Smrčka Aleš, Ing., Ph.D. (DITS FIT BUT), člen
Vašíček Zdeněk, doc. Ing., Ph.D. (DCSY FIT BUT), člen
Citation
NEŠPOR, Patrik. Potlačení DDoS útoků zneužívajících fragmentaci paketů. Brno, 2020. Bachelor's Thesis. Brno University of Technology, Faculty of Information Technology. 2020-07-10. Supervised by Kučera Jan. Available from: https://www-dev.fit.vutbr.cz/study/thesis/23089/
BibTeX
@bachelorsthesis{FITBT23089, author = "Patrik Ne\v{s}por", type = "Bachelor's thesis", title = "Potla\v{c}en\'{i} DDoS \'{u}tok\r{u} zneu\v{z}\'{i}vaj\'{i}c\'{i}ch fragmentaci paket\r{u}", school = "Brno University of Technology, Faculty of Information Technology", year = 2020, location = "Brno, CZ", language = "czech", url = "https://www.fit.vut.cz/study/thesis/23089/" }