Επιθέσεις Distributed Denial of Service (DDoS) και μέτρα προστασίας σε δίκτυα δεδομένων

Master Thesis
Author
Καραμάνης, Νικόλαος
Date
2011-07-01View/Open
Subject
Διαδίκτυο (Internet) -- Μέτρα ασφαλείας ; Πληροφορικά εγκλήματα ; Ηλεκτρονικοί υπολογιστές -- Δίκαιο και νομοθεσία ; Computer crimes -- Investigation ; Computer crimes -- PreventionAbstract
The present thesis analyses thoroughly the DoS and DDoS attack problem and studies possible means of countering such attacks. DDoS attacks are a type of distributed attacks that owe their effectiveness to the fact that an enormous number of nodes launch an attack against an individual host at the same period of time with a view to exhaust the resources of its system and to force it to deny service to its customers. Effective protection against this sort of attacks is not without difficulties however, as recent forms of DoS attacks have distribution characteristics (DDoS– Distributed Denial of Service attacks), and thus require well coordinated efforts among several networks and infrastructure equipment to be dealt with successfully. Moreover the techniques they use, make pinpointing the real source of the DDoS attack troublesome, as the mastermind usually hides behind a structure of already compromised systems in an effort to avoid detection and thus any punishment for his actions.