簡易檢索 / 詳目顯示
| 研究生： |
洪瑞奕 Ruei-yih Hung |
|---|---|
| 論文名稱： | Migmod: A Mechanism to Establish a TCP/IP Connection under DDoS Attacks |
| 指導教授： |
許富皓
Fu-hao Hsu |
| 口試委員: | |
| 學位類別： |
碩士 Master |
| 系所名稱： |
資訊電機學院 - 資訊工程學系 Department of Computer Science & Information Engineering |
| 論文出版年： | 2019 |
| 畢業學年度： | 107 |
| 語文別： | 英文 |
| 論文頁數： | 43 |
| 中文關鍵詞： | 分散式阻斷服務攻擊 、即時移轉 、可載入核心模組 、三向交握 |
| 外文關鍵詞： | Distributed Denial-of-Service attack, Live migration, Loadable Kernel Module, Three-way handshake |
| 相關次數： | 點閱：14 下載：0 |
| 分享至: |
| 查詢本校圖書館目錄 查詢臺灣博碩士論文知識加值系統 勘誤回報 |
近年來，分散式阻斷服務攻擊的威脅性不斷增加。然而，目前對分散式阻斷服務攻擊尚未有一套完善的方法，能夠在轉移服務時同時保持連線，並即時將新連線導向新的目標。在本研究中，將基於一套可能夠在轉移服務時同時保持連線的系統上，提出一個能即時將新連線導向新的目標的方法，進一步提升在分散式阻斷服務攻擊發生時，受該系統保護的服務的存活性。
在此篇論文中，我們將會簡單的介紹我們的動機與目標，接著介紹我們所使用的基礎系統。接著我們會介紹加入了新機制的系統的運作概念與系統架構。然後講述實作的細節。最後是效能的分析與討論。
In recent years, Distributed Denial-of-Service (DDoS) attacks have become more and more threatening. However, there has not been a perfect methodology can keep connections alive during migrating services, and permit new connections to new host immediately at the same time. In this work, we based on a system that can keep connections alive during migrating services then propose a new mechanism to permit new connections to new host immediately, and thus improve the service availability during DDoS attack.
In this thesis, we will talk about our motivation and purpose. Then we will introduce the base system we are going to use. After that, we will present the principle of Migmod, its system structure, and implementation details. At the end, we will discuss the performance evaluation and future works.
[1] “DDoS attacks in Q1 2019” May 2019, https://securelist.com/ddos-report-q1-2019/90792/ (Accessed on 7/22/2019)
[2] Manos Antonakakis, Tim April, Michael Bailey, Matthew Bernhard, Elie Bursztein, Jaime Cochran, Zakir Durumeric, J. Alex Halderman, Luca Invernizzi, Michalis Kallitsis, Deepak Kumar, Chaz Lever, Zane Ma, Joshua Mason, Damian Menscher, Chad Seaman, Nick Sullivan, Kurt Thomas, Yi Zhou., “Understanding the Mirai Botnet,” In Proc. 26th USENIX Security Symposium, Aug 2017.
[3] Hsu et al., “Method for live migrating virtual machine,” February 20, 2018, http://patft.uspto.gov/netacgi/nph-Parser?Sect1=PTO2&Sect2=HITOFF&p=1&u=%2Fnetahtml%2FPTO%2Fsearch-bool.html&r=1&f=G&l=50&co1=AND&d=PTXT&s1=9898319&OS=9898319&RS=9898319 (Accessed on 7/22/2019)
[4] C. Clark, K. F., S. Hand, J. G. Hansen, E. Jul, C. Limpach, I. Pratt, A. Warfield., “Live Migration of Virtual Machines,” NSDI'05 Proceedings of the 2nd conference on Symposium on Networked Systems Design & Implementation, vol. 2, pp.273-286, May 2005.
[5] ZhiYao Zhong, “Handover: A Mechanism to Improve the Availability of Network Services after Live Migration under Private Networks,” National Central University, Master's degree, Jun 2016.
