Project Canary

 

 

 

 

 

 

Distributed Denial of Service attacks rely on many devices positioned throughout a larger, sometimes global, network of devices to overload a smaller resource. The larger network of devices overloads the capacity of the smaller resource which create the denial of service effect. The Canary project aims to move the detection of these attacks from monolithic, centralized sources to a distributed network of detectors. These detectors are placed throughout the larger network and communicate amongst themselves about the measured behaviors occuring at that network location. 

The Common Open Research Emulator (CORE) program is being used to generate pre-defined networks consisting of regular, malicious, and monitoring nodes. A portion of this project has been open-sourced and is available on Github at https://github.com/whoward3/Canary

 

Members: Winston Howard