Tempesta: a framework for HTTP DDoS attacks mitigation
Tempesta: a framework for HTTP DDoS attacks mitigation
复制标题
Tempesta：HTTP DDoS 攻击缓解框架
DOI：
--
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
Alexander Krizhanovsky
中科院分区：
文献类型：
--
作者：
Alexander Krizhanovsky
Modern application layer HTTP DDoS attacks employ complex techniques that make them difficult to detect. So modern DDoS defense approaches are also based on sophisticated methods to classify HTTP requests. Usually, these methods require exhaustive data on user activity from different layers of protocol stack, mainly from network, transport and application layers.
Moreover, a typical DDoS attack puts a huge load onto a target Web cluster. That demands a DDoS mitigation solution that delivers higher performance and is able to significantly reduce the load on defended back-end systems.
In this article we present Tempesta, a hybrid solution that combines a caching HTTP server and a firewall in one. It accelerates Web applications much efficiently than traditional Web accelerators and provides a high performance framework that offers easy access to data from all protocol layers. That facilitates the development and use of sophisticated DDoS classification and blocking algorithms.
