We let the RedHawk Linux system endure this incursion for the purpose of real time performance measurement. Mitigation for this attack has to be configured as a rate limited option in the network switch. Packets from raw sockets are processed before they can be intercepted and filtered by Netfilter/Iptables rules.

Linux implements ISC DHCP which makes use of raw sockets. DHCP starvation denies clients of dhcp leases by overwhelming the dhcp server with bogus lease requests. This type of DoS attack can be mitigated by appropriate Netfilter/Iptables rules to drop traffic from the offending system. Apache Web Service denial DHCP Starvation Web services are made unavailable by saturating the web server's tcp ports with connection requests thereby denying legitimate requests for web pages. The RedHawk Linux system is subjected to two types of DoS attacks. This distribution is supported and maintained by Offensive Security ( ).

Kali Linux is a Debian based Linux distribution that specializes in penetration testing and vulnerability assessment. Introduction A full installation of Kali Linux ( is deployed to launch DoS attacks on a RedHawk Linux system. A familiarity with RedHawk Linux system administration is assumed in this discussion. Real Time performance of the RedHawk Linux system is measured while the attacks are in progress. NSA hardening guidelines and STIG rules are applied to harden the RedHawk Linux system. 1 A Concurrent Real Time White Paper 2881 Gateway Drive Pompano Beach, FL (954) real Real Time Performance of a Security Hardened RedHawk Linux System During Denial of Service Attacks By: Rajiv Vaidyanath Concurrent Consulting Engineer August 2013Ģ Abstract This paper is intended for those who wish to understand the real time performance of a security hardened RedHawk Linux system when it is under Denial of Service (DoS) attacks.

Download red hawk alarm systems