| Abstract [eng] |
Distributed denial-of-service attacks are becoming increasingly sophisticated, as cybercriminals have a wide range of different attacks in their arsenal. These attacks are no longer limited to the old principle of creating as much traffic as possible into the system, since such a surge in traffic is quickly detected and blocked. Attacks can now send packets very slowly to disrupt the service. In addition, the emergence of various attack types allows criminals to use multi-vector attacks against corporate systems, thus attacking multiple devices at once. It is obvious that it will not be possible to completely protect against these attacks, but once an attack has occurred, proper investigation can significantly help prevent the same attack from recurring in the future. To understand an attack, it is necessary to understand how exactly this attack worked and at what devices it attacked. Currently, this is done using several tools, manually. This is a time- consuming process and requires appropriate personnel training. Having a tool capable of quickly and comprehensively analyzing the attack surface would allow for organizing security measures, sharing experiences with other companies, and thus adapting to ongoing service denials. |
