{"id":35190,"date":"2019-10-31T22:02:50","date_gmt":"2019-10-31T19:02:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/eksperiment-mozhno-li-snizit-negativnye-posledstviya-dos-atak-s-pomoshhyu-proksi\/"},"modified":"2019-10-31T22:02:50","modified_gmt":"2019-10-31T19:02:50","slug":"eksperiment-mozhno-li-snizit-negativnye-posledstviya-dos-atak-s-pomoshhyu-proksi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/eksperiment-mozhno-li-snizit-negativnye-posledstviya-dos-atak-s-pomoshhyu-proksi","title":{"rendered":"K\u00eds\u00e9rlet: cs\u00f6kkenthet\u0151-e a DoS t\u00e1mad\u00e1sok negat\u00edv hat\u00e1sa proxy haszn\u00e1lat\u00e1val?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"K\u00eds\u00e9rlet:<\/noindex><\/p>\n

K\u00e9p: Unsplash<\/a><\/noindex><\/i><\/p>\n

A DoS attack is one of the major threats to information security in today's internet. There are dozens of botnets that malicious actors rent out to conduct such attacks. <\/p>\n

Researchers from the University of San Diego conducted kutat\u00e1s<\/a><\/noindex> a study on how using proxies helps mitigate the negative effects of DoS attacks \u2013 we present to your attention the main theses of this work.<\/a><\/noindex><\/p>\n

Introduction: Proxies as a Tool Against DoS<\/h2>\n

\nSuch experiments are periodically conducted by researchers from various countries, but their common problem lies in the lack of resources to model attacks closely resembling real-life scenarios. Tests on small setups do not allow for answers to questions about how effectively proxies can resist attacks in complex networks, what parameters play a crucial role in minimizing damage, etc.<\/p>\n

For the experiment, the scientists created a model of a typical web application \u2013 for example, an e-commerce service. It operates using a cluster of servers, users are distributed across different geographical locations, and they access the service via the internet. In this model, the internet serves as the means of communication between the service and the users \u2013 this is how web services from search engines to online banking tools work.<\/p>\n

\"K\u00eds\u00e9rlet:
\n
\nDoS attacks make normal interaction between the service and users impossible. There are two types of DoS: application layer attacks and infrastructure layer attacks. In the latter case, attackers directly target the network and hosts on which the service operates (for instance, flooding the network's bandwidth with traffic). In the case of an application layer attack, the attacker's goal is the interface that users interact with \u2013 they send a massive number of requests to cause the application to crash. The described experiment focused on infrastructure layer attacks.<\/p>\n

A proxy network is one of the tools to minimize the damage from DoS attacks. When using a proxy, all requests from the user to the service and the responses are transmitted not directly, but through intermediary servers. Both the user and the application do not 'see' each other directly; they only have access to the proxy addresses. As a result, it is impossible to attack the application directly. Edge proxies \u2013 external proxies with accessible IP addresses, are located at the network boundary, and connections first go through them. <\/p>\n

\"K\u00eds\u00e9rlet:
\n
\nTo successfully counter a DoS attack, the proxy network must have two key capabilities. Firstly, such an intermediary network must act as a mediator, meaning it is only possible to 'reach' the application through it. This will eliminate the possibility of a direct attack on the service. Secondly, the proxy network should be able to provide users with the ability to continue interacting with the application even during an attack.<\/p>\n

The experiment infrastructure.<\/h2>\n

\nThe study used four key components:<\/p>\n