Thesis Details

Potlačení DDoS útoků zneužívajících fragmentaci paketů

Bachelor's Thesis Student: Nešpor Patrik Academic Year: 2019/2020 Supervisor: Kučera Jan, Ing.
English title
Mitigation of DDoS Attacks Exploiting Packet Fragmentation
Language
Czech
Abstract

This bachelor's thesis deals with the development of new mitigation strategies that are designed to suppress DDoS attacks that exploit packet fragmentation. It analyses fragmented traffic primarily emphasizing the order of fragmented packets. Based on the result of the analysis, it implements a new heuristic method for port numbers inference. The work also measures the latency and throughput of newly implemented functionalities. All new methods are integrated in a project developed by the CESNET association.

Keywords

Packet fragmentation, Exploiting packet fragmentation, Mitigation strategies, Ports inference, DDoS, DDoS mitigation

Department
Degree Programme
Information Technology
Files
Status
defended, grade B
Date
10 July 2020
Reviewer
Committee
Ryšavý Ondřej, doc. Ing., Ph.D. (DIFS FIT BUT), předseda
Grézl František, Ing., Ph.D. (DCGM FIT BUT), člen
Hradiš Michal, Ing., Ph.D. (DCGM FIT BUT), člen
Smrčka Aleš, Ing., Ph.D. (DITS FIT BUT), člen
Vašíček Zdeněk, doc. Ing., Ph.D. (DCSY FIT BUT), člen
Citation
NEŠPOR, Patrik. Potlačení DDoS útoků zneužívajících fragmentaci paketů. Brno, 2020. Bachelor's Thesis. Brno University of Technology, Faculty of Information Technology. 2020-07-10. Supervised by Kučera Jan. Available from: https://www-dev.fit.vutbr.cz/study/thesis/23089/
BibTeX
@bachelorsthesis{FITBT23089,
    author = "Patrik Ne\v{s}por",
    type = "Bachelor's thesis",
    title = "Potla\v{c}en\'{i} DDoS \'{u}tok\r{u} zneu\v{z}\'{i}vaj\'{i}c\'{i}ch fragmentaci paket\r{u}",
    school = "Brno University of Technology, Faculty of Information Technology",
    year = 2020,
    location = "Brno, CZ",
    language = "czech",
    url = "https://www.fit.vut.cz/study/thesis/23089/"
}
Back to top