Abstract
In Today’s Digital World, the continuous interruption of users has affected Web Servers (WSVRs), through Distributed Denial-of-Service (DDoS) attacks. These attacks always remain a massive warning to the World Wide Web (WWW). These warnings can interrupt the accessibility of WSVRs, completely by disturbing each data processing before intercommunication properties over pure dimensions of Data-Driven Networks (DDN), management and cooperative communities on the Internet technology. The purpose of this research is to find, describe and test existing tools and features available in Linux-based solution lab design Availability Protection System (Linux-APS), for filtering malicious traffic flow of DDoS attacks. As source of malicious traffic flow taken most widely used DDoS attacks, targeting WSVRs. Synchronize (SYN), User Datagram Protocol (UDP) and Internet Control Message Protocol (ICMP) Flooding attacks are described and different variants of the mitigation techniques are explained. Available cooperative tools for manipulating with network traffic, like; Ebtables and Iptables tools are compared, based on each type of attacks. Specially created experimental network was used for testing purposes, configured filters servers and bridge. Inspected packets flow through Linux-kernel network stack along with tuning options serving for increasing filter server traffic throughput. In the part of contribution as an outcomes, Ebtables tool appears to be most productive, due to less resources it needed to process each packet (frame). Pointed out that separate detecting system is needed for this tool, in order to provide further filtering methods with data. As main conclusion, Linux-APS, solutions provide full functionality for filtering malicious traffic flow of DDoS attacks either in stand-alone state or combined with detecting systems.
Highlights
We proposed different Linux-based resolution approaches and testing simulations for network traffic, filtering data packets to protect against Distributed Denial-of-Service (DDoS) attacks using cooperative “Ebtables” and “Iptables” tools, mitigation techniques, and Linux-based resolution lab design firewall architecture
Bridging Decision: At this point frame is being investigated whether its destination is local process or its endpoint media access control (MAC) address islocated on extra sideways of the bond
A tiny part of computing resources is required for processing internet control message protocol (ICMP) flood, which makes this type of attacks filtering less complex and available across networks worldwide
Summary
Through the development of information and communication technology (ICT), our societies become global information societies with all-around smart computing environments, but the-security systems and policies that regulate this environment are not accelerated as needed. The main suite, on a selected time, before transfers to some digits of „proxy‟ plans, connected on CPUs, everywhere on the Internet The proxies, once they obtain the -command, recruit the attack. The importance of this research work is to find out and testing most efficient and reliable tools existing in Linux-based systems for filtering and aggregation DDoS attacks. Literature analysis & background gives a brief survey of research going in the area of most common types and methods of mitigations of DDoS attacks and available Linux-based solutions for data traffic filtering and aggregation. The problem statement and related work has been identified and will describe experimental network components and kernel tuning It focuses on the conclusion of the work that will include implementation of the selected solutions on data filter servers, differentiated by installed hardware
Sign-in/Register to view highlights & summary Sign-in/Register to access full text options 
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Schedule a callMore From: International Journal of Advanced Computer Science and Applications
Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.
