Demonstracija distribuiranog napada uskraćivanja usluga na temelju zlouporabe protokola SSDP

undergraduate thesis

• Title (english): Demonstration of a distributed denial of service attack based on SSDP protocol abuse
• Author: Benjamin Horvat
• Mentor: Miljenko Mikuc (mentor)
• Committee member: Miljenko Mikuc (predsjednik povjerenstva)
• Committee member: Denis Salopek (član povjerenstva)
• Committee member: Karlo Slovenec (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2021-07-07, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Razvojem Interneta je proizašao raspon različitih protokola i usluga. Protokoli ostvaruju mogućnost smislene komunikacije uređaja na mrežama te su s time ostvarene različite usluge. Međutim se može mnogo protokola zlouporabiti za napade internetskih usluga poput Network Time Protocol, Internet Control Message Protocol i Domain Name System. Simple Service Discovery Protocolom je moguće zlouporabiti vanjsko vidljive Universal Plug and Play uređaje tipa printere, smart televizore i sigurnosne kamere za napade. Ovim radom se prikazuje kako se takav napad izvodi te njegove mogućnosti.

Abstract (english)

Through the development of the Internet, many different protocols and services have emerged. Protocols allow devices in a network to communicate meaningful information which is the crutch of many different services. Unfortunately, many protocols can be misused for attacks on internet services like the Network Time Protocol, Internet Control Message Protocl and Domain Name System. The Simple Service Discovery Protocol can be used to manipulate Universal Plug and Play devices like printers, smart TVs and security cameras for attacks. In this work it will be demonstrated how to execute such an attack and its potential.

• Keywords: DDoS; SSDP; preplavljivanje; amplifikacija; reflekcija
• Keywords (english): DDoS; SSDP; flooding; amplifcation; reflection
• Language: croatian
• URN:NBN: urn:nbn:hr:168:504671
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-14 20:34:24