Filtrační jednotka pro eliminaci DDoS útoků s využitím komoditního hardware

English title

System for DDoS attack mitigation using commodity hardware

Type

functional specimen

License

required - licence fee

Authors

Nagy Peter, Ing. (FIT BUT)
Grégr Matěj, Ing., Ph.D. (DIFS FIT BUT)
Podermański Tomáš, Ing. (CVIS BUT)

Keywords

DDoS, security, BGP Flowspec, NetX, open platform, API, 40Gbit, 100Gbit

Description

Prototype system for detection and mitigation of volumetric DDoS attacks. The implementation of the prototype is based on telecom operators requirements to have a system built on an open platform and hardware. The prototype allows integration with the currently used DDoS detection systems, information export using API, and control DDoS traffic filtering using the BGP Flowspec protocol.

Files

Projects

Integrated platform for analysis of digital data from security incidents (VI20172020062)

Research groups

NES@FIT - Networks and distributed systems research group (VZ NES@FIT)

Departments

Department of Information Systems FIT BUT (DIFS FIT BUT)