Ασφάλεια και προστασία της ιδιωτικότητας στα δίκτυα διανομής περιεχομένου

Ζαρκαλή, Βασίλω

Content delivery network security and privacy issues

Master Thesis

Author

Ζαρκαλή, Βασίλω

Date

2024-11

Abstract

This thesis explores the security and privacy challenges associated with Content Delivery Networks (CDNs), examining their core architectures, potential vulnerabilities, and the technologies employed to safeguard data and users. It begins with an in-depth analysis of CDN functionality, emphasizing their role as distributed networks designed to enhance internet content delivery. It details key components such as Edge Servers, caching mechanisms, and request-routing techniques while also categorizing CDNs into Public, Private, Peer-to-Peer (P2P), and Hybrid models. Next, the thesis focuses on security threats affecting CDNs, including Distributed Denial-of-Service (DDoS) attacks, application-layer vulnerabilities, data interception, and the exposure of the Origin Server. It explores various defense mechanisms, such as Web Application Firewalls (WAFs), Intrusion Detection Systems (IDSs), anti-bot strategies, and encryption techniques that help mitigate these risks. Privacy concerns are also addressed, given that CDNs often collect and store user data. The thesis examines relevant regulatory frameworks, including the General Data Protection Regulation (GDPR) and the Network and Information Security Directive 2 (NIS-2). Additionally, it evaluates privacy-enhancing technologies such as anonymization techniques, Privacy by Design principles, and secure communication protocols. To provide practical insight, the thesis includes a case study on Akamai, one of the largest and most widely deployed CDNs worldwide. The analysis highlights Akamai’s security strategies and regulatory compliance efforts, illustrating real-world applications of the discussed security and privacy measures. In conclusion, the study underscores the critical role of CDNs in optimizing both performance and security on the internet. However, as cyber threats continue to evolve, CDNs must adopt advanced protection strategies. Emerging technologies, including artificial intelligence, automated attack detection, and decentralized data protection solutions, are expected to play a pivotal role in the future of CDN security.

Postgraduate Studies Programme

Ασφάλεια Ψηφιακών Συστημάτων

Department

Σχολή Τεχνολογιών Πληροφορικής και Επικοινωνιών. Τμήμα Ψηφιακών Συστημάτων

Number of pages

Language

Greek

URI

https://dione.lib.unipi.gr/xmlui/handle/unipi/17493

Collections

Τμήμα Ψηφιακών Συστημάτων

Show full item record

Except where otherwise noted, this item's license is described as
Αναφορά Δημιουργού-Μη Εμπορική Χρήση-Όχι Παράγωγα Έργα 3.0 Ελλάδα