Zaštita računalnih sustava u oblaku od napada distribuiranim uskraćivanjem usluge

professional thesis

• Title (english): Protection of cloud computing systems against distributed denial of service attacks
• Author: Tibor Žukina
• Mentor: Marin Vuković (mentor)
• Committee member: Stjepan Groš (predsjednik povjerenstva)
• Committee member: Marin Vuković (član povjerenstva)
• Committee member: Krešimir Grgić (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; (Department of Telecommunications); Zagreb
• Defense date and country: 2023-05-03, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing; Information Systems

Abstract

Napadi DDoS jedni su od najjednostavnijih i najučinkovitijih vrsta napada na informacijske sustave. Pogađaju razne slojeve računalnih mreža, od mrežnog i transportnog sloja do aplikacijskog sloja. Zbog narušavanja raspoloživosti ciljanih sustava dovode do velike štete i izrazito negativnog utjecaja na poslovanje. Poslovni rizik potencijalnih napada DDoS obično je viši od prihvatljive razine rizika pa su metode zaštite nužne jer njihova primjena omogućuje značajno smanjenje rizika. Protiv njih se koriste različite metode zaštite, uključujući zaštitu kombinacijom lokalne infrastrukture i infrastrukture u oblaku, dinamičku zaštitu simulacijom napada, zaštitu na temelju pravila vatrozida te zaštitu korištenjem algoritama strojnog učenja. Veliki pružatelji usluga infrastrukture u oblaku kao što su AWS i Azure najčešće su mete napada DDoS te implementiraju razne mjere zaštite, uključujući filtriranje i blokiranje zlonamjernog prometa na mrežnoj razini te dizajn sustava koji su manje podložni napadima. Postoje različiti alati IDPS koji pomažu u detekciji i zaštiti od napada DDoS. Njihovo poznavanje vrlo je korisno za odgovor na napade u okruženju u oblaku te lokalnom okruženju.

Abstract (english)

DDoS attacks are one of the simplest and most effective attack methods on information systems. They target different computer network layers, ranging from the network and transport layer to the application layer. Due to the violation of the availability of targeted systems, they cause significant damage and extremely negative business impact. The business risk of potential DDoS attacks is usually higher than the acceptable risk level, so the protection methods are necessary because their application enables significant risk reduction. Various protection methods are used against them, including the combination of a local and cloud infrastructure, dynamic protection by attack simulation, protection based on firewall rules, and protection using machine learning algorithms. Major cloud providers such as AWS and Azure are the most common targets of DDoS attacks, and they implement various protective measures, including filtering and blocking malicious traffic on a network level and designing systems less susceptible to attacks. Various IDPS tools help detect and protect against DDoS attacks. Being familiarized with them is very useful in response to attacks in the cloud and local environment.

• Keywords: napadi DDoS; raspoloživost; mrežni sloj; transportni sloj; aplikacijski sloj; poslovni rizik; metode zaštite; infrastruktura u oblaku; AWS; Azure; lokalno okruženje; alati IDPS
• Keywords (english): DDoS attacks; availability; network layer; transport layer; application layer; business risk; protection methods; cloud infrastructure; AWS; Azure; local environment; IDPS tools
• Language: croatian
• URN:NBN: urn:nbn:hr:168:791806
• Study programme: Title: Specialist study programme in information security; Study programme type: university; Study level: postgraduate specialist; Academic / professional title: Specijalist informacijske sigurnosti (Specijalist informacijske sigurnosti)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2023-07-05 11:37:39