BTS Internships

Deployment of an event detection and alerting software to protect against DDoS attacks

Arno DONEUX ( Promotion: BCYB21 )

Company: Saashup

13, rue de Peppange, L-3378 Livange

Contact: Bertrand HOUIN
Email: bertrand@saashup.com
Phone: 0033 781270092

Description:
For the security project we would like to have great logging of Nginx and WAF (Web Application Firewall). Nginx plus is used as the reverse proxy and includes web application firewall, this firewall should protect the applications from DDos (Distributed Denial of Service), unauthorized usage, etc.. This Filtering should be logged inside another application, so that we can create alerting rules based on the event.

Tools:
Deployment of the alerting software and rules are deployed automatically with ansible
• An alert will be send to the team when there is a DDos Attack
• Create scripts to validate the alerts, which will do simulated attacks on the proxy

Nginx plus
• ELK/Greylog/Splunk
• Prometheus/Alertmanager
• Ansible
• Bash/Python

Period: 1680480000 – 1687478400

Tutor: Christian RODESCH