Reproducing DNS 10Gbps flooding attacks with commodity-hardware - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2016

Reproducing DNS 10Gbps flooding attacks with commodity-hardware

Résumé

Being DNS an essential service for Internet reliability, it is an attractive target for malicious users. The constantly increasing Internet traffic rate challenges DNS services and their attack detection methods to handle actual queries while being flooded by tens of millions of malicious requests per second. Moreover, state of the art on hostile actions evolve fast. DNS administrators continuously face new kinds of attacks and they regularly need to evaluate their detection systems. We have studied different approaches to develop a tool able to reproduce state-of-the-art attacks, aiming to make it easy to evaluate countermeasure strategies. We have focused on commodity-hardware, DPDK and MoonGen to build a flexible flood query generator. The described tool can saturate a 10Gbps link, sending more than 12 million attack-like random DNS requests per second.
Fichier principal
Vignette du fichier
DNSTrafficLoadGenerator-CameraReady.pdf (158.48 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01394336 , version 1 (09-11-2016)

Identifiants

Citer

Santiago Ruano Rincon, Sandrine Vaton, Stéphane Bortzmeyer. Reproducing DNS 10Gbps flooding attacks with commodity-hardware. IWCMC 2016 : 12th International Wireless Communications & Mobile Computing Conference, Sep 2016, Paphos, Cyprus. pp.510 - 515, ⟨10.1109/IWCMC.2016.7577110⟩. ⟨hal-01394336⟩
251 Consultations
962 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More