{"id":38951,"date":"2015-09-16T16:15:22","date_gmt":"2015-09-16T02:15:22","guid":{"rendered":"http:\/\/www.irantahgig.ir\/?p=38951"},"modified":"2015-09-16T16:15:22","modified_gmt":"2015-09-16T02:15:22","slug":"%d8%b1%d8%a7%d9%87-%d8%ad%d9%84-%d9%85%d9%86%d8%a7%d8%b3%d8%a8-%d8%a8%d8%b1%d8%a7%db%8c-%d8%ac%d9%84%d9%88%da%af%db%8c%d8%b1%db%8c-%d8%a7%d8%b2-%d8%a7%d9%81%d8%b2%d8%a7%db%8c%d8%b4-%d8%ad%d9%85%d9%84","status":"publish","type":"post","link":"http:\/\/www.irantahgig.ir\/?p=38951","title":{"rendered":"\u0631\u0627\u0647 \u062d\u0644 \u0645\u0646\u0627\u0633\u0628 \u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062d\u0645\u0644\u0627\u062a \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0646\u0627\u0645 \u062f\u0627\u0645\u0646\u0647"},"content":{"rendered":"

A fair solution to\u00a0DNS amplification attacks<\/span><\/p>\n

\u062a\u0627\u0631\u06cc\u062e:<\/strong> \u06f2\u06f0\u06f0\u06f7<\/span><\/p>\n

\u067e\u0627\u06cc\u06af\u0627\u0647:\u00a0<\/strong>\u00a0IEEE Xplore<\/span><\/span><\/p>\n

\u0644\u06cc\u0646\u06a9 \u062f\u0627\u0646\u0644\u0648\u062f \u0627\u0635\u0644 \u0645\u0642\u0627\u0644\u0647<\/a><\/span><\/p>\n

\"OK\"<\/span><\/p>\n

\t

\n\n\t\t\n\t\t
\n\t\t\t150,000 \u0631\u06cc\u0627\u0644 – \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0646 \u0628\u0647 \u0633\u0628\u062f \u062e\u0631\u06cc\u062f<\/span> <\/span><\/a>\u0646\u0647\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0646 \u062e\u0631\u06cc\u062f<\/a>\n\t\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t<\/svg>\n\t\t\t\t\t\t\u0645\u0648\u0631\u062f \u0628\u0647 \u0633\u0628\u062f \u062e\u0631\u06cc\u062f \u0627\u0636\u0627\u0641\u0647 \u0634\u062f\t\t\t\t\t<\/span>\n\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t

<\/span><\/p>\n

\u0646\u0627\u0645 \u0645\u062c\u0644\u0647:\u00a0<\/strong>In Digital Forensics and Incident Analysis<\/span><\/span><\/p>\n

\u0642\u06cc\u0645\u062a:<\/strong> \u06f1\u06f5\u06f0,\u06f0\u06f0\u06f0 \u0631\u06cc\u0627\u0644<\/span><\/p>\n

\u062a\u0639\u062f\u0627\u062f \u0635\u0641\u062d\u0627\u062a \u0627\u0646\u06af\u0644\u06cc\u0633\u06cc:<\/strong> \u06f1\u06f0<\/span><\/p>\n

\u062a\u0639\u062f\u0627\u062f \u0635\u0641\u062d\u0627\u062a \u0641\u0627\u0631\u0633\u06cc:<\/strong> \u06f1\u06f4<\/span><\/p>\n

\u06a9\u062f: <\/strong>\u06f5\u06f5\u06f0\u06f0\u06f3<\/span><\/p>\n

\u0686\u06a9\u06cc\u062f\u0647 \u0641\u0627\u0631\u0633\u06cc<\/span><\/h3>\n

\u0631\u0648\u06cc\u062f\u0627\u062f\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062c\u062f\u0651\u06cc \u0627\u062e\u06cc\u0631 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u0686\u0646\u062f\u06cc\u0646 \u062d\u0645\u0644\u0647 \u06a9\u0646\u0646\u062f\u0647 \u0627\u0632 \u062c\u0639\u0644 IP ( \u067e\u0631\u0648\u062a\u06a9\u0644 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a\u06cc) \u0628\u0631\u0627\u06cc \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06af\u0633\u062a\u0631\u062f\u0647 \u0627\u0632 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0646\u0627\u0645 \u0628\u0627\u0632\u06af\u0634\u062a\u06cc \u0628\u0647 \u0645\u0646\u0638\u0648\u0631 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062d\u0645\u0644\u0627\u062a DDoS \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u0628\u06cc\u0634\u0645\u0627\u0631\u06cc\u060c \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0633\u0646\u0627\u0631\u06cc\u0648\u0647\u0627\u06cc \u062d\u0645\u0644\u0627\u062a \u0627\u0641\u0632\u0627\u06cc\u0634\u06cc \u0628\u0647 \u0633\u0631\u0648\u0631 \u0646\u0627\u0645 \u062f\u0627\u0645\u0646\u0647 (DNS) \u0627\u0632 \u0633\u0631\u0648\u0631\u200c\u0647\u0627\u06cc DNS \u0628\u0631\u0627\u06cc \u0628\u0647 \u0627\u062c\u0631\u0627 \u062f\u0631 \u0622\u0648\u0631\u062f\u0646 \u062d\u0645\u0644\u0627\u062a DoS \u0628\u0627 \u0645\u0635\u0631\u0641 \u067e\u0647\u0646\u0627\u06cc \u0628\u0627\u0646\u062f\u060c \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0646\u0648\u0639 \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u062f\u0627\u0631\u0627\u06cc \u0686\u0646\u06cc\u0646 \u0645\u0632\u06cc\u062a\u06cc \u0645\u06cc\u200c\u0628\u0627\u0634\u062f \u06a9\u0647 \u067e\u06cc\u0627\u0645\u200c\u0647\u0627\u06cc \u067e\u0627\u0633\u062e \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 DNS (\u0633\u0631\u0648\u0631 \u0646\u0627\u0645 \u062f\u0627\u0645\u0646\u0647) \u0628\u0647 \u0637\u0648\u0631 \u0642\u0627\u0628\u0644 \u062a\u0648\u062c\u0647\u06cc \u0628\u06cc\u0634\u062a\u0631 \u0627\u0632 \u067e\u06cc\u0627\u0645 \u062c\u0633\u062a\u062c\u0648\u06cc DNS \u0645\u06cc\u200c\u0628\u0627\u0634\u062f. \u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647 \u0645\u0627 \u0637\u0631\u062d \u062c\u062f\u06cc\u062f\u060c \u0633\u0627\u062f\u0647 \u0648 \u0639\u0645\u0644\u06cc \u0631\u0627 \u0627\u0631\u0627\u0626\u0647 \u0645\u06cc\u200c\u062f\u0647\u06cc\u0645 \u06a9\u0647 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0631\u0627 \u0642\u0627\u062f\u0631 \u0645\u06cc\u200c\u0633\u0627\u0632\u062f \u062a\u0627 \u062a\u0645\u0627\u06cc\u0632\u06cc \u0631\u0627 \u0628\u06cc\u0646 \u067e\u0627\u0633\u062e\u200c\u0647\u0627\u06cc \u062d\u0642\u06cc\u0642\u06cc \u0648 \u062c\u0639\u0644\u06cc DNS (\u0633\u0631\u0648\u0631 \u0646\u0627\u0645 \u062f\u0627\u0645\u0646\u0647) \u0642\u0627\u0626\u0644 \u0634\u0648\u062f. \u0637\u0631\u062d \u067e\u06cc\u0634\u0646\u0647\u0627\u062f\u06cc \u0628\u0647 \u0635\u0648\u0631\u062a \u067e\u06cc\u0634\u200c\u0628\u06cc\u0646\u06cc \u0634\u062f\u0647\u200c\u0627\u06cc \u0628\u0631\u0627\u06cc \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0631\u0627\u0641\u06cc\u06a9 DNS \u062a\u0645\u0627\u0645 \u0648\u0642\u062a \u0648 \u0647\u0634\u062f\u0627\u0631 \u0628\u0647 \u0646\u0627\u0638\u0631\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc\u060c \u062f\u0631 \u0635\u0648\u0631\u062a \u0644\u0632\u0648\u0645\u060c \u0628\u0647 \u0627\u062c\u0631\u0627 \u06af\u0630\u0627\u0634\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0627\u06cc\u0646 \u0637\u0631\u062d \u0647\u0645\u0686\u0646\u06cc\u0646 \u0628\u0647 \u0635\u0648\u0631\u062a \u0627\u0646\u0641\u0639\u0627\u0644\u06cc \u062f\u0631 \u062a\u0639\u0627\u0645\u0644 \u0628\u0627 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u200c\u0647\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0642\u0648\u0627\u0646\u06cc\u0646 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0627\u062a\u0648\u0645\u0627\u062a\u06cc\u06a9 \u0628\u0631\u0627\u06cc \u062a\u062d\u0631\u06cc\u0645 \u0628\u0633\u062a\u0647\u200c\u0647\u0627\u06cc \u062c\u0639\u0644\u06cc \u0639\u0645\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u062a\u062c\u0632\u06cc\u0647 \u0648 \u062a\u062d\u0644\u06cc\u0644 \u0645\u0627 \u0648 \u0646\u062a\u0627\u06cc\u062c \u062a\u062c\u0631\u0628\u06cc \u0645\u0634\u0627\u0628\u0647 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u0637\u0631\u062d \u067e\u06cc\u0634\u0646\u0647\u0627\u062f\u06cc \u0631\u0627\u0647\u200c\u062d\u0644 \u0645\u0648\u062b\u0631\u06cc \u0631\u0627 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u062d\u0645\u0644\u0627\u062a \u062e\u0627\u0635\u06cc \u0631\u0648\u06cc \u0645\u06cc\u200c\u062f\u0647\u0646\u062f\u060c \u0627\u0631\u0627\u0626\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f.<\/span><\/p>\n

\u0686\u06a9\u06cc\u062f\u0647 \u0627\u0646\u06af\u0644\u06cc\u0633\u06cc<\/span><\/h3>\n

Recent serious security incidents reported several attackers employing IP spoofing to massively exploit recursive name servers to amplify DDoS attacks against numerous networks. DNS amplification attack scenarios utilize DNS servers mainly for performing bandwidth consumption DoS attacks. This kind of attack takes advantage of the fact that DNS response messages may be substantially larger than DNS query messages. In this paper we present a novel, simple and practical scheme that enable administrators to distinguish between genuine and falsified DNS replies. The proposed scheme, acts proactively by monitoring in real time DNS traffic and alerting security supervisors when necessary. It also acts reactively in co-operation with the firewalls by automatically updating rules to ban bogus packets. Our analysis and the corresponding experimental results show that the proposed scheme offers an effective solution, when the specific attack unfolds<\/span><\/p>\n

\u0645\u0634\u062e\u0635\u0627\u062a \u0627\u0633\u062a\u0646\u0627\u062f\u06cc<\/strong><\/span><\/h3>\n

Kambourakis, G., Moschos, T., Geneiatakis, D., & Gritzalis, S. (2007, August). A fair solution to\u00a0DNS amplification attacks. In Digital Forensics and Incident Analysis, 2007. WDFIA 2007. Second International Workshop on (pp. 38-47). IEEE<\/span><\/p>\n

\u062f\u0627\u0646\u0644\u0648\u062f \u0627\u0635\u0644 \u0645\u0642\u0627\u0644\u0647<\/span><\/h3>\n

\"10002icon\"<\/a>\u0648\u06cc\u0698\u06af\u06cc\u200c\u0647\u0627\u06cc \u0645\u0642\u0627\u0644\u0647 \u0631\u0627\u0647 \u062d\u0644 \u0645\u0646\u0627\u0633\u0628 \u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062d\u0645\u0644\u0627\u062a \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0646\u0627\u0645 \u062f\u0627\u0645\u0646\u0647<\/span><\/h1>\n

\u0645\u0642\u0627\u0644\u0647 “\u0631\u0627\u0647 \u062d\u0644 \u0645\u0646\u0627\u0633\u0628 \u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062d\u0645\u0644\u0627\u062a \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0646\u0627\u0645 \u062f\u0627\u0645\u0646\u0647” \u062f\u0631 \u0633\u0627\u0644 \u06f2\u06f0\u06f0\u06f7 \u062f\u0631 \u0645\u062c\u0644\u0647\u00a0In Digital Forensics and Incident Analysis<\/span> \u0686\u0627\u067e \u0634\u062f\u0647 \u0648 \u062f\u0631 \u067e\u0627\u06cc\u06af\u0627\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a\u06cc\u00a0IEEE Xplore<\/span> \u0646\u0645\u0627\u06cc\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647 \u0628\u0647 \u0628\u0631\u0631\u0633\u06cc\u00a0\u0633\u0631\u0648\u0631\u200c\u0647\u0627\u06cc DNS\u060c\u00a0\u062c\u0639\u0644 IP\u060c \u062d\u0645\u0644\u0627\u062a DoS \u0648 \u0631\u0648\u06cc\u062f\u0627\u062f\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u067e\u0631\u062f\u0627\u062e\u062a\u0647 \u0627\u0633\u062a. \u0647\u0645\u0686\u0646\u06cc\u0646 \u0628\u0631\u0627\u0633\u0627\u0633 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u067e\u0627\u06cc\u06af\u0627\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a\u06cc \u06af\u0648\u06af\u0644 \u0627\u0633\u06a9\u0648\u0644\u0627\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647 \u06f2\u06f7 \u0628\u0627\u0631 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0646\u0627\u062f \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a.<\/span><\/p>\n

\t\n\n\t\t\n\t\t

\n\t\t\t150,000 \u0631\u06cc\u0627\u0644 – \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0646 \u0628\u0647 \u0633\u0628\u062f \u062e\u0631\u06cc\u062f<\/span> <\/span><\/a>\u0646\u0647\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0646 \u062e\u0631\u06cc\u062f<\/a>\n\t\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t<\/svg>\n\t\t\t\t\t\t\u0645\u0648\u0631\u062f \u0628\u0647 \u0633\u0628\u062f \u062e\u0631\u06cc\u062f \u0627\u0636\u0627\u0641\u0647 \u0634\u062f\t\t\t\t\t<\/span>\n\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t

A fair solution to\u00a0DNS amplification attacks \u062a\u0627\u0631\u06cc\u062e: \u06f2\u06f0\u06f0\u06f7 \u067e\u0627\u06cc\u06af\u0627\u0647:\u00a0\u00a0IEEE Xplore \u0644\u06cc\u0646\u06a9 \u062f\u0627\u0646\u0644\u0648\u062f \u0627\u0635\u0644 \u0645\u0642\u0627\u0644\u0647<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[84,127,316,515],"tags":[],"_links":{"self":[{"href":"http:\/\/www.irantahgig.ir\/index.php?rest_route=\/wp\/v2\/posts\/38951"}],"collection":[{"href":"http:\/\/www.irantahgig.ir\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.irantahgig.ir\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.irantahgig.ir\/index.php?rest_route=\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"http:\/\/www.irantahgig.ir\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=38951"}],"version-history":[{"count":1,"href":"http:\/\/www.irantahgig.ir\/index.php?rest_route=\/wp\/v2\/posts\/38951\/revisions"}],"predecessor-version":[{"id":38954,"href":"http:\/\/www.irantahgig.ir\/index.php?rest_route=\/wp\/v2\/posts\/38951\/revisions\/38954"}],"wp:attachment":[{"href":"http:\/\/www.irantahgig.ir\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=38951"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.irantahgig.ir\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=38951"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.irantahgig.ir\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=38951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}