Detecting and fingerprinting network-based DDoS mitigation solutions

点击翻译按钮获取中文摘要

Distributed Denial of Service (DDoS) is one of the most common threats to organizations, where a large number of infected systems simultaneously send requests to a target website, crippling the website and rendering it unavailable to regular clients. DDoS can result in loss of revenue and profitability, reduction in productivity, and decline in stock price. As a result, companies invest heavily in various DDoS mitigation solutions to detect and defend against these attacks. Part of the process of black box testing a company's DDoS mitigation solution is to first identify potential servers and services that may be targeted, which is normally done in the reconnaissance phase of the testing. However, the reconnaissance process can become very complicated and less transparent when the company is protecting its infrastructure with a Web Application Firewall (WAF) or utilizing a Content Distribution Network (CDN). The objective of the project is to automate the reconnaissance process to accurately fingerprint the various DDoS mitigation solutions deployed on a company's infrastructure.