Grant: Engage Grants Program
University of Ontario Institute of Technology
$24,986.00
Detecting and fingerprinting network-based DDoS mitigation solutions
FY 2015-16
Summary
Distributed Denial of Service (DDoS) is one of the most common threats to organizations, where a large
number of infected systems simultaneously send requests to a target website, crippling the website and
rendering it unavailable to regular clients. DDoS can result in loss of revenue and profitability, reduction in
productivity, and decline in stock price. As a result, companies invest heavily in various DDoS mitigation
solutions to detect and defend against these attacks. Part of the process of black box testing a company's DDoS
mitigation solution is to first identify potential servers and services that may be targeted, which is normally
done in the reconnaissance phase of the testing. However, the reconnaissance process can become very
complicated and less transparent when the company is protecting its infrastructure with a Web Application
Firewall (WAF) or utilizing a Content Distribution Network (CDN). The objective of the project is to automate
the reconnaissance process to accurately fingerprint the various DDoS mitigation solutions deployed on a
company's infrastructure.
Program
Engage Grants Program
Location
Ontario, Canada
Recipient Type
Academia
Type
Grant
Source
NSERC's Awards Data
As published
Application id
485727-2015
Name nom
ElKhatib, Khalil
Department département
Business and Information Technology, Faculty of
Organization id
19222
Institution établissement
University of Ontario Institute of Technology
Province en
Ontario
Province fr
Ontario
Country en
CANADA
Country fr
CANADA
Fiscal year exercice financier
2015
Competition year année de concours
2015
Award amount
24986
Program id
EGP
Program name en
Engage Grants Program
Program name fr
Programme de subventions d'engagement partenariat
Group en
Research partnerships programs
Group fr
Programmes de partenariat
Committee code
1553
Committee name en
Ontario Internal Decision Committee
Committee name fr
Comité de décision interne pour l'Ontario
Area of application code
800
Area of application group en
Information and communication services
Area of application group fr
Services d'information et de télécommunications
Area of application en
Information and communication services
Area of application fr
Services d'information et de télécommunications
Research subject code
2700
Research subject group en
Information technology
Research subject group fr
Technologie de l'information
Research subject en
Information technology
Research subject fr
Technologie de l'information
Partie
1
Nb partie
1
Application title
Detecting and fingerprinting network-based DDoS mitigation solutions
Keyword
NSERC
Application summary
Distributed Denial of Service (DDoS) is one of the most common threats to organizations, where a large
number of infected systems simultaneously send requests to a target website, crippling the website and
rendering it unavailable to regular clients. DDoS can result in loss of revenue and profitability, reduction in
productivity, and decline in stock price. As a result, companies invest heavily in various DDoS mitigation
solutions to detect and defend against these attacks. Part of the process of black box testing a company's DDoS
mitigation solution is to first identify potential servers and services that may be targeted, which is normally
done in the reconnaissance phase of the testing. However, the reconnaissance process can become very
complicated and less transparent when the company is protecting its infrastructure with a Web Application
Firewall (WAF) or utilizing a Content Distribution Network (CDN). The objective of the project is to automate
the reconnaissance process to accurately fingerprint the various DDoS mitigation solutions deployed on a
company's infrastructure.
