DoS attacks in java(urgent)

I am an undergraduate student and currently working on network security project based on denial of service attacks in java. I have established a client/server connection and now want to capture all incoming packets at the receiving end(server) and then monitor them for DoS attack..Is it possible if anybody could help me a little bit in this as soon as possible. I know JPCap class would be a better option but i don't know how to deploy it in my current code..Thanks
Please email me on [email protected]
Regards,
Sameen Khan

Dear Salpeter,
Ok if you think i'm not close to it then u can help
and guide...I have been through several books on DOS
attacks. I know about its theory but don't know how to
code in java.....actually this is my term proj, which
is due in a week or so.......just couldn't do it
although i'm good at simple java but not java in
networking security....if you know any website where i
could get its complete code for help then plz tell
me...thanksWhat have you been doing all term? Due in a week? And you don't know Java? Sounds like you're screwed.
How will your prof feel about you downloading someone else's complete code and turning it in as if it were yours? Where I come from we call that "cheating".

Similar Messages

Denial of Service attacks and Java

Im in the process of doing my final year project. Im very interested in internet security and I am proposing to do a project on denail of service attacks and building some sort of software in java to handle them
As I understand it java has security features but it doesnt have many provisions for denial of service attacks...
Im just wanting to hear peoples views on this subject and see how I could posssibly start this project. I dont have many resources atm, and am currently trying to find information so I can better approach this project
Any help/suggestions would be useful!
Thanx

You won't be able to block a DoS-attack from Java.
Some DoS principle examples:
Just a few machines with high upstreams could generate a huge amount of data with random ip numbers (using simple IP spoofing techniques) and can use different types of packages (e.g ACK or SYN packages) causing some software programs to crash. Besides the DoS attacks don't have to even be routed to an open port, it can also be addressed for a closed port, but if there are enough packets comming over the line to the closed port (assuming the closed port drops the packets on arrival) the line will still be filled.
Java on the other hand does not work on low level networking therefor it has no influance on what does make it to the operating system's kernel and the services.
In short, I can't think of a way that Java will be able to block a DoS attack, even the best hardware firewalls/routers i know have problems blocking big ones (if it is possible at all).
Sorry to pop your bubble, but i think you should look into another subject.
Good luck,
Barre

How to execute dos command in Java program?

In Perl, it has System(command) to call dos command.
Does java have this thing?
or any other way to execute dos command in java program?
Because i must call javacto compile a file when the user inputed a java file name.

Look in the Runtime class, it is implemented using the Singleton design pattern so you have to use the static method getRuntime to get its only instance, on that instance you can invoke methods like
exec(String command) that will execute that command in a dos shell.
Regards,
Gerrit.

How to execute DOS command in Java?

I want to execute a dos command in Java,such as execute test.bat command? How to realize it?
Thanks in advance!

http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html
I found this article really useful in solving this. Hope it helps.
Cheers,
John

Running Dos command in Java

hey, Just wondering can anyone help me get started, i pretty new to java and wanted to run the date command in Dos from a java application. If i could just know where to begin or even if this is possible, it would be much appreciated!!

If you're using Runtime.exec() you need to read this:
http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html
If you're new to java it might be a bit heavy, but definitely add it to your "Favourites" for later!

Protect against DOS attack on NIO Server

I have a NIO server which recently underwent a DOS attack. The attack was very simply a packet flood in which a rogue engineered client sent a packet request to the system 80,000 times in about 5 seconds.
The packet was successfully ignored in the application code (it just logged it). Logging usually take the IP address but in this case using getInetAddress() on the socket channel returned null every time.
However, as far as future protection goes how could I modify the system to be able to withstand such attacks? Under normal operation the server would establish TCP socket connection with client on a public port. Then client sends login packet and if authorized client can send other request packets to get data and perform user actions (like chatting).
In this attack user did not bother to attempt to login and instead just sent many of the same data request packets over and over, causing the system to use up the thread pool and block other legitimate clients from now connecting. I am not expert in security like this, so what is best practice for making code stand up?
Some general questions I can think of:
- would using SSL help?
- some way to throttle client requests to a certain frequency or byte limit per second?
- should have one port for login and another for data requests after login succeed?
Thanks In Advance.

You can't use SSL with non-blocking NIO unless you want tackle the complexities of the SSLEngine (or use my Scalable SSL product), and in any case I'm not sure it would really help - it would just move the DOS attack into the SSLEngine handling. Separate ports won' t help either as there is nothing to stop the attacker using either of them, or both.
Maybe your best defence is to identify rogue packets as quickly as possible, and drop the entire connection if you get a bad packet (e.g. one where getInetAddress() returns null, although in fact I don't see how that is actually possible). You might proceed from there to logging rogue source addresses and dropping connections from them immediately.
I would also investigate what can be done in the firewall configuration.

How to run DOS command in Java environment?

Can i run DOS command in Java environment?
I did like this:
Runtime r = Runtime.getRuntime();
r.exec("cmd.exe");
r.exec("set classpath=%CLASSPATH%;.\\tmp")
but failed.
However if I run the java command, it runs successfully.
r.exec("javac Test.java");
r.exec("java Test");
how should I do so that i can run the DOS commands metioned above in Java Environment?
thanks a lot.

Have a look at http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html
This may help. I wonder if this is ok ?
Runtime r= Runtime.getRuntime();
r.exec("cmd.exe /C set classpath=%CLASSPATH%;.\\tmp\"");

Run dos command from java

May I ask how I should write if I want to execute a dos command in java? The command is :
"C:\Program Files\Real\realproducer\rmeditor -i abc.rm -d abc.txt". Should I use array?
Thanks!

why an array ?
String command = "C:\\Program Files\\Real\\realproducer\\rmeditor -i abc.rm -d abc.txt";
Process p = Runtime.getRuntime().exec( command );what about the seach function on the left side ? ;-)
tobias

Dos command from java

hi all
how do i run dos commands from java??????????

Using Runtime#exec().
Also see http://java.sun.com/j2se/1.5.0/docs/api/java/lang/Runtime.html

DOS command from java applet

Hi, I need to perform a DOS command from Java (using WFC if needed)...
I have no idea, so please help!
Thank you.

OH OH OH WAIT! It is an Applet! i think there will be some security issues here! Sure enough you can't execute commands on the system from an applet unless you make some changes on the java.policy files on the client machine (that means, if your applet is in a web page, every machine which view your page).

Execute a DOS command in java

Hi all,
Is it possible to execute a DOS command in java? If so, how do I do that?
Also, if it is a Linux machine, may I execute a Linux command in java?
Thanks for your help.
Regards,
Bernard

First, define 'command'.
You can run external programs with Runtime.exec (eg. Runtime.getRuntime().exec("notepad");) but there are a few drawbacks regarding that method.
http://www.javaworld.com/javaworld/jw-12-2000/jw-1229-traps.html

Dos command in java

Hi
I have used google to get an answer for this.
This is the command i have used to run some dos commands in java
Unfortunately it doesn't throws any exceptions but still the directory and the file news.txt is not created.
Process t=objrun.exec("command.com /c dir > c:/news.txt");
Process p=objrun.exec("command.com /c mkdir c:/Prabhath");
Please help me....am using windows xp OS.

Note that the java.util.File has the following methods that might do the job :public File[] listFiles()
public boolean mkdirs()
public boolean createNewFile()

How to invoke dos shell from java program

Hi,
I'm not able to invoke dos shell from java.
Can any one help me in this issue.
I'm providing the source code below:
try{
Runtime.getRuntime().exec("cmd.exe")
catch(IOException e) {
System.out.println(e.getStackTrace());
Thanks

Does it throw a different exception?
Or does it just do nothing at all?
It does nothing at all[/b
Is this a standalone Java app?
Or a Java Applet running via a webbrowser? [b]It's a standalone application

Clearing the DOS Window in Java

hi
I want to clear the dos screen using java.
I saw 2 solutions on the net(given below) , but both did not work. Can someone advise how I can go about doing this ? I'm
working on Windows2000.
Thanks in advance.
Seema
1. char esc = 27; // ESC code
String clear = esc + "[2J" // note case
System.out.print(clear); // Dos screen should be cleared
2. Runtime.getRuntime().exec( "cmd.exe /c cls" ) ;

The escape code approach would only work on DOS windows that are processing ANSI escape sequences. This is something people used to enable all the time back in the pre-Windows days, since it was the only way to do things like clearing screens, setting colours, drawing menus out of text characters, etc. Ansi.sys still exists, at least on Win98 (not sure about NT, 2000, etc.). If you troll through the Microsoft web site or hunt down old books on DOS, you'll be able to find out how to set it up and use it.

Solution to Prevent the DOS Attack

Hello Experts,
We have our Production Servers placed at ISP DC where we are using Cisco ASA firewall model 5505 and all the servers placed behind the firewall.The bandwidth we have 100 MBPS and there is no IPS device in between.
Since long time, we have been experiencing some network issues and recently we detected the D-DOS attack affecting our Prod Services and now we are looking to have a solution to mitigate the attack.
Can somebody please suggest the solution which must be cheapest in the terms of COST to get this attack stopped?
We contacted to Radware on this but the solution that they are recommending is too expensive.
Can we achieve the solution by implementing the Cisco IPS module/appliance and will it work to prevent the D-DOS attack?
Whatever best solution you can recommend then please suggest and an early response on this would be highly appreciated as we need to have a quick solution.
Thanks.

Hello Ray,
Hope you are doing fine.
Okay the less expensive:
1- Using the MPF on the ASA set the limits for the amount of connections open to a server or the embryonic connections.
http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/s8.html#wp1414075
One a little bit more expensive:
2- Get the IPS module and prevent that by enabling the required signatures.
Side note: I would recommend you talking about this problem with your ISP so you can avoid getting this overload of traffic on your outside interface so bandwith can be used on the right traffic and connections.
Regards,
Julio Carvajal

DoS attacks in java(urgent)

Similar Messages

Maybe you are looking for