Nástroj pro analýzu a filtrování nežádoucího provozu

Abstract

Denial of Service (DoS / DDoS) attacks are still a major problem for web applications and servers today. This thesis is focused on analysis and filtration of these attacks. In the theoretical part I focus on the possibility of detection and filtration of these attacks and possible ways of defense. In the practical part I present the way of solution using reverse proxy server, IPtables, ELK stack and File2ban. This reverse proxy server monitors and filters network traffic towards the web server. I visualize this traffic using an ELK stack that includes ElasticSearch, Logstash, and Kibana. In conclusion, I present the findings and future possibilities of expanding defense.