Propuesta de una solución de seguridad que provea una respuesta activa frente a ataques de denegación de servicio basada en la integración de herramientas Open Source sobre un prototipo de red jerárquica

Abstract

This project proposes designing a security solution that provides an active response against Denial of Service attacks (DoS). This is based on the integration of Open Source tools, and it is deployed and validated on a hierarchical network prototype. A review of the state of technology and a functional analysis based on a set of criteria that represent the design requirements is presented. Then a set of Open Source tools have been selected to build a security solution. The solution proposes a design of an active response system based on four modules: the first one is composed of intrusion detection systems (IDS); the second module is an active response executor (IRS); the third module consist of a set of security devices which will perform an active response; finally, the fourth module is composed of tools to report events generated by IDS and responses executed by IRS. Finally, an analysis of the results is presented after making five DoS attacks on the security solution.