February 2021
Beginner to intermediate
372 pages
6h 48m
Korean
Content preview from 웹 애플리케이션 보안: 정찰, 공격, 방어 세 단계로 배우는 웹 애플리케이션 보안의 모든 것
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
343
26
장
DoS 방어
정당해 보이는 요청이 웹 서버에 들
어온다.
악의적인 것으로 보이는 요청이
웹 서버에 들어온다.
웹 서버가 요청을 처리한다.
라우팅 수준에서 요청을 처리해
블랙홀로 전달한다.
웹 서버가 클라이언트에
응답을 반환한다.
요청이 블랙홀로 들어가면 아무
일도 일어나지 않고 컴퓨팅 파워가
소모되지 않는다.
악의적 트래픽의 대부분을 블랙홀이 잡아먹기 때문에 귀중한 서버 네트워크와 컴퓨팅
리소스는 정당한 사용자에 할당된다.
중요한 블랙홀 필터링 알고리즘은 실제 사용자의 비율에 영향을 끼침에 유의한다.
그림
26-1
블랙홀은 웹 애플리케이션에 대한
DDoS
공격을 완화하는 전략이다.
의심 가는(혹은 반복적인) 트래픽은
블랙홀
서버로 보내지는데 이것은 애플리케이션 서버의
기능처럼 보이지만 아무 연산도 수행하지 않는다. 정당한 트래픽은 정당한 웹 애플리케이션 서
버에 정상적으로 라우팅된다. 악의적 트래픽을 재라우팅하는 데 블랙홀이 효과적이기는 하지
만 정확도가 높지 않으면 정당한 트래픽까지 블랙홀에 보내버리는 문제가 있을 수 있다. 블랙
홀은 소규모
DDoS
공격을 막을 수 있지만 대규모
DDoS
공격을 감당하기는 힘들다.
이러한 기법들과 함께 지나치게 민감한 필터가 정당한 트래픽을 차단할 수 있다는 점에 유의하
라. 이런 점 때문에 공격적인
DDoS
완화 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.