Skip to main navigation menu Skip to main content Skip to site footer

Information technologies and systems

August 16, 2024; Oxford, UK: VII International Scientific and Practical Conference «THEORETICAL AND EMPIRICAL SCIENTIFIC RESEARCH: CONCEPT AND TRENDS»


SLOWLORIS DDOS DETECTION AND PREVENTION IN REAL-TIME


DOI
https://doi.org/10.36074/logos-16.08.2024.036
Published
18.08.2024

Abstract

Web servers play a key role in providing access to online resources. However, they are targeted by a variety of cyber attacks, including DDoS attacks such as Slowloris, which can paralyse servers by draining their resources. This paper investigates methods for detecting and preventing Slowloris attacks in real time. The main focus was on algorithms and tools that can be used to protect web servers. The architecture of streaming and asynchronous web servers, their vulnerability to Slowloris attacks, and recommendations for improving server configuration to minimise risks were analysed. Software has been developed that monitors traffic in real time, detects suspicious activity, and automatically blocks attacking IP addresses using a firewall. The functionality of notifications about attacks via Telegram Bot and logging of events for further analysis has been implemented. The obtained results showed that the developed measures can effectively protect servers from Slowloris attacks, ensuring their uninterrupted operation.

References

  1. Slowloris DDoS attack. (n. d.). https://httpd.apache.org/docs/2.4/developer/
  2. Developer documentation for the apache HTTP server 2.4 - apache HTTP server version 2.4. (n. d.). https://httpd.apache.org/docs/2.4/developer/
  3. Inside NGINX: How we designed for performance & scale – NGINX community blog. (n. d.). https://www.nginx.com/blog/inside-nginx-how-we-designed-for-performance-scale/