Low interaction honeypot as the defense mechanism against Slowloris attack on the web server

Open

N.R. Fitri, A.H.S. Budi, I. Kustiawan, S.E. Suwono

2020 IOP Conference Series: Materials Science and Engineering Vol. 850 Issue 1 Conference paper Cited by 8 SDG 9SDG 16 Quartile

Abstract

Threats and attacks on internet services are in line with developments in internet technology. One of the main risks is Distributed Denial of Service (DDoS). In this paper, we focus on the Slowloris attack which is an open-source DDoS attacker that generally attacks the Apache webserver. Apache is one of the most popular web servers in the world and is still used by many companies. This research presents another way to reduce attacks to the firewalls and load a counterweight by using a low interaction honeypot, HoneyPy. In normal conditions, attack schemes and defense mechanisms are evaluated by conducting experiments. Slowloris attacks cause high traffic because it prevents the socket from closing, so the webserver cannot handle other connections from legitimate users. When defense mechanisms are applied to the network, Slowloris attacks that enter the webserver are minimized because most packets are discarded and directed to the honeypot without the attacker's knowledge. It seems like the attacker has managed to attack the web server even when the attack becomes slower. © 2020 IOP Publishing Ltd. All rights reserved.

Affiliations

Department of Electrical Engineering Education, Universitas Pendidikan Indonesia, Bandung, West Java, 40154, Indonesia; Group of Faculty Member, Telkom Corporate University Center, Bandung, West Java, 40152, Indonesia

Research at a Glance

Premium content — register to unlock

Research at a Glance

Register to unlock

Topics & SDG Alignment

Premium content — register to unlock

Topics & SDG Alignment

Register to unlock

Collaboration

Premium content — register to unlock

Collaboration

Register to unlock

Author Profile (Selected)

Premium content — register to unlock

Author Profile (Selected)

Register to unlock

References Overview

Premium content — register to unlock

References Overview

Register to unlock

Journal & Source

Premium content — register to unlock

Journal & Source

Register to unlock

Metadata & Integrity

Premium content — register to unlock

Metadata & Integrity

Register to unlock