Mitigação de ataques HTTP/2 Rapid-Reset através de mecanismos SDN
Pais, Paulo Simões Gomes
MSc Thesis · 2024 · University of Coimbra
Supervisors: Bruno Miguel de Oliveira Sousa, Tiago José dos Santos Martins da Cruz
Abstract
This dissertation investigates the mitigation of HTTP/2 Rapid-Reset attacks using SDN mechanisms. The study proposes the development of a test environmentthat integrates SDN controllers, specific protocols, and virtualization through VMware. The objective is to evaluate mitigation strategies against Rapid Resetattacks, leveraging the programmability and flexibility of SDN. The choiceof Python was essential due to its simplicity, robustness, and wide adoption inthe networking and cybersecurity community.The research details the process of building the test environment, which includes configuring SDN controllers, simulating virtual network devices, and integrating with VMware to create a dynamic and realistic network scenario. Various mitigation strategies for the Rapid Reset attack were tested, including the analysis of the effectiveness of different detection and response algorithms. The results indicate that the implemented defense mechanisms exhibited low mitigation times, ensuring a quick and effective response to potential attacks without compromising system performance.This work significantly contributes to the field of cybersecurity by demonstratinghow the unique characteristics of SDN, such as comprehensive network visibility and dynamic reprogramming capabilities, can be used to effectively detect, isolate,and neutralize botnet threats. Additionally, all developed scripts have been made available on GitHub, facilitating their use and expansion by the community.The conclusions of this dissertation provide a solid foundation for future research in the application of SDN technologies in network security.