{"id":35190,"date":"2019-10-31T22:02:50","date_gmt":"2019-10-31T19:02:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/eksperiment-mozhno-li-snizit-negativnye-posledstviya-dos-atak-s-pomoshhyu-proksi\/"},"modified":"2019-10-31T22:02:50","modified_gmt":"2019-10-31T19:02:50","slug":"eksperiment-mozhno-li-snizit-negativnye-posledstviya-dos-atak-s-pomoshhyu-proksi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/eksperiment-mozhno-li-snizit-negativnye-posledstviya-dos-atak-s-pomoshhyu-proksi","title":{"rendered":"Experiment: can the negative effects of DoS attacks be reduced using a proxy?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Experiment:<\/noindex><\/p>\n

Image: Unsplash<\/a><\/noindex><\/i><\/p>\n

DoS attacks are one of the major threats to information security in today's internet. There are dozens of botnets that attackers rent out to conduct such attacks. <\/p>\n

Scientists from the University of San Diego conducted study<\/a><\/noindex> research on how the use of proxies helps mitigate the negative effects of DoS attacks \u2013 we present to you the main findings of this work.<\/a><\/noindex><\/p>\n

Introduction: Proxies as a Tool to Combat DoS<\/h2>\n

\nSuch experiments are periodically conducted by researchers from different countries, but their common problem lies in the lack of resources to model attacks that are close to reality. Tests on small setups do not allow answers to questions about how effectively proxies will counteract an attack in complex networks, which parameters play a key role in minimizing damage, etc.<\/p>\n

For the experiment, the scientists created a model of a typical web application \u2013 for example, an e-commerce service. It operates with a cluster of servers, users are distributed across different geographical locations and access the service via the internet. In this model, the internet serves as a communication medium between the service and its users \u2013 this is how web services function, from search engines to online banking tools.<\/p>\n

\"Experiment:
\n
\nDoS attacks make normal interaction between the service and users impossible. There are two types of DoS: application-level attacks and infrastructure-level attacks. In the latter case, attackers target the network and hosts on which the service operates (for instance, flooding the network with traffic to exhaust its bandwidth). In the case of application-level attacks, the attacker aims at the user interaction interface \u2013 to do this, they send an enormous number of requests in order to cause the application to crash. The described experiment concerned infrastructure-level attacks.<\/p>\n

Proxy networks are one of the tools for minimizing the damage from DoS attacks. When using a proxy, all requests from the user to the service and their responses are transmitted not directly, but through intermediary servers. Both the user and the application do not directly 'see' each other, only the addresses of the proxies are accessible. As a result, it is impossible to attack the application directly. At the network perimeter are so-called edge proxies \u2013 external proxies with accessible IP addresses, connecting first to them. <\/p>\n

\"Experiment:
\n
\nIn order to successfully counter a DoS attack, a proxy network must have two key capabilities. Firstly, such an intermediary network must act as a mediator, meaning that one can only 'reach' the application through it. This will eliminate the possibility of a direct attack on the service. Secondly, the proxy network must be able to provide users with the ability to continue interacting with the application, even during an attack.<\/p>\n

Infrastructure of the experiment<\/h2>\n

\nThe study involved four key components:<\/p>\n