logo SBA

ETD

Digital archive of theses discussed at the University of Pisa

 

Thesis etd-04192013-162212


Thesis type
Tesi di laurea specialistica
URN
etd-04192013-162212
Thesis title
Firewall at high speed for Unix systems
Department
INGEGNERIA DELL'INFORMAZIONE
Course of study
INGEGNERIA INFORMATICA
Supervisors
.
relatore Prof. Rizzo, Luigi
relatore Prof. Lettieri, Giuseppe
Keywords
  • firewall
  • flood
  • ipfw
  • netmap
  • protection
  • synflood
Graduation session start date
09/05/2013
Availability
Withheld
Release date
09/05/2053
Abstract (Inglese)
Abstract (Italiano)
In this work we modify IPFW, a firewall of the FreeBSD distribution, in order to protect an end host(s) from SYN floods. The two network tools used are: the firewall itself, an
application (that can run also in another machine relative to the one that
gives the service) that functions as an intermediary between the end host(s)
and the attacker intercepting and filtering all the traffic that pass between
them; a particular method called ’SYN Cookies’ that permits
to not save anything in memory for each incoming connection setup (TCP), avoiding
the memory exhaustion caused by the flood.
File