Implementation of Slowloris Distributed Denial of Service (DDOS) Attack on Web Servers

G. Onuh¹ , P. Owa²

Section:Research Paper, Product Type: Journal-Paper
Vol.10 , Issue.2 , pp.11-15, Apr-2022

Online published on Apr 30, 2022

Copyright © G. Onuh, P. Owa . This is an open access article distributed under the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
 

View this paper at   Google Scholar | DPI Digital Library

XML View     PDF Download

How to Cite this Paper

Abstract :
In recent times, denial of service (DoS) attacks poses a substantial threat to the existing resources on the Internet as well as internal and external network infrastructures. Denial of service attacks exploits vulnerabilities and depletes available resources of a given IT system. As a result, it directly degrades the performance of network services. There various types of DoS attacks. Some are engineered to use up resources from email and web services. These resource-consuming scheme subsequently makes the application services unavailable and inaccessible on the network. The majority of DoS attacks initiate multiple open or semi-open TCP connections on the target node. These open TCP connections disable the server from admitting legitimate requests as a result of multiple waiting connections on its sockets. This research seeks to implement a denial of service attack in python programming language in an attempt to further demystify the mechanism of such attacks and recommend mitigation techniques to address them.

Key-Words / Index Term :
DDOS Attack; Slowloris, Web Security

References :
[1] Asri, S., & Pranggono, B. Impact of Distributed Denial-of-Service Attack on Advanced Metering Infrastructure. Wireless Personal Communications, 83(3), 2211–2223, 2015.
[2] Bhosale, K. S., Nenova, M., & Iliev, G. The distributed denial of service attacks (DDoS) prevention mechanisms on application layer. 2017 13th International Conference on Advanced Technologies, Systems and Services in Telecommunications, TELSIKS 2017 - Proceeding, 136–139, 2017.
[3] Faria, V. da S., Gonçalves, J. A., da Silva, C. A. M., Vieira, G. de B., & Mascarenhas, D. M. Sdtow: A slowloris detecting tool for WMNS. Information (Switzerland), 11(12), 1–18, 2020.
[4] Kant, K., & Tiwari, N. Denial of Service attack using Slowloris. 448–454, 2020.
[5] Lukaseder, T., Ghosh, S., & Kargl, F. Mitigation of Flooding and Slow DDoS Attacks in a Software-Defined Network. ArXiv, 1–3, 2018.
[6] Moustis, D., & Kotzanikolaou, P. Evaluating security controls against HTTP-based DDoS attacks. IISA 2013 - 4th International Conference on Information, Intelligence, Systems and Applications, 165–170, 2013.
[7] Shorey, T., Subbaiah, D., Goyal, A., Sakxena, A., & Mishra, A. K. Performance Comparison and Analysis of Slowloris, GoldenEye and Xerxes DDoS Attack Tools. 2018 International Conference on Advances in Computing, Communications and Informatics, ICACCI, 318–322, 2018.