DDos 공격대응 가이드 - kisa 자료
2017.10.31 00:35
첨부 : DDoS 공격대응 가이드.pdf
1. DDoS 공격대응 개요 ·································4
2. DDoS 공격대응 절차 ·································5
(1단계) 공격의 인지 ··············································5
(2단계) 공격유형 파악 ············································7
(3단계) 차단정책 정의 및 대응 ···································13
(4단계) 공격대응 및 사후조치 ····································16
(추가사항) DNS 공격대응 방안 ···································17
[별첨1] DDoS 공격대응 매뉴얼 ·························19
[별첨2] DDoS 공격차단을 위한 장비 및 현황 ············21
[별첨3] DDoS 공격유형 분류 및 설명 ···················23
1. DDoS 공격유형 분류 ··········································23
2. UDP/ICMP Traffic Flooding 공격 ·······························24
3. TCP Traffic Flooding 공격 ·····································25
4. IP Flooding 공격 ··············································27
5. HTTP Traffic Flooding 공격 ····································28
6. HTTP Header/Option Spoofing Flooding 공격 ···················31
7. 기타 서비스 마비공격 ·········································37
[별첨4] 주요 DDoS 공격유형별 대응방안 ················43
1. UDP/ICMP Traffic Flooding 공격방어 ···························43
2. SYN Flooding 공격방어 ·······································44
3. GET Flooding 공격방어 ·······································45
4. GET with Cache-Control 공격방어 ······························47
5. HTTP Continuation Data Flooding 공격방어 ·····················48
6. TCP Session 공격방어 ········································49
7. URL Redirect 우회 공격방어 ···································50
8. Slow HTTP POST 공격방어 ···································50
9. DNS 공격방어 ················································52
10. Hash DoS 공격방어 ··········································53
11. Hulk DoS 공격방어 ··········································54
[별첨5] 주요 DDoS 공격도구 분석결과 ··················56
- R.U.D.Y 기반의 Slow POST 공격분석 ···························56
- HTTP DoS Tool 기반의 Slow POST 공격분석 ···················63
- DRDoS (Distributed Reflection DoS) 공격분석 ····················71
- Anonymous WebLoic 공격도구분석 ······························73
- Hash DoS 공격유형 및 도구분석 ································76
- Hulk DoS 공격유형 및 도구분석 ································81
댓글 0
번호 | 제목 | 날짜 | 조회 수 |
---|---|---|---|
80 | BroadCast 주소 | 2018.04.03 | 442 |
79 | tcp 상태 전이도 | 2017.08.24 | 449 |
78 | 보안점검 툴 | 2017.08.25 | 457 |
77 | Vtl quick start guide | 2017.08.23 | 461 |
76 | 주요정보통신기반시설 기술적 취약점 분석 평가 상세 가이드 | 2019.03.20 | 484 |
75 | Oracle asm | 2017.08.24 | 494 |
74 | HPUX 보안설정 가이드 | 2017.08.25 | 503 |
73 | uptime 갑인가? | 2017.09.13 | 510 |
72 | [python] MySQL 사용법 예제 | 2018.10.24 | 523 |
71 | ftp 보안 취약점및 대책 | 2017.11.05 | 538 |
70 | SUN 솔라리스 보안취약점 조치 방안 | 2018.03.05 | 547 |
69 | Process Explorer - 윈도우용 프로세서, 메모리, TCP 모니터링용 | 2017.09.09 | 548 |
68 | 개발보안 | 2017.11.01 | 563 |
67 | HTTP Status Code HTTP 상태 코드 | 2018.05.03 | 573 |
66 | BCP | 2017.11.01 | 589 |