Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
ASA 5506-X & 5510 comparisons during a DDoS attack
University West, Department of Engineering Science.
University West, Department of Engineering Science.
2022 (Swedish)Independent thesis Basic level (university diploma), 5 credits / 7,5 HE creditsStudent thesisAlternative title
ASA 5506-X & 5510 comparisons during a DDoS attack (English)
Abstract [sv]

Syftet med detta examensarbete var att jämföra de två Cisco brandväggarna Adaptive Security Appliance 5506-X och 5510 enheternas prestanda under två olika Distributed Denial-of-Service attacker utifrån dessa enheters tandardinställningar. Examensarbetet var utfört i en Cisco kontrollerad labbmiljö på Högskolan Väst.

Ett botnät var skapat med datorerna i labbmiljön för att utföra TCP och UDP flödes attacker på båda ASA enheter och se vilken som skulle prestera bättre under dessa omständigheter. Totalt åtta figurer används för att visa resultatet av testerna, med genomsnitt samlat från tio mätningar för varje parameter.

ASA 5506-X har en kärna för enbart ASA enheten men har ytterligare tre kärnor för Fire-power modulen, denna används dock inte ur lådan vilket innebär att den bara använder en kärna. ASA 5510 har inte Firepower modulen och använder en kärna. ASA 5506-X singulär kärna är inte lika snabb som ASA 5510 singulär kärna. Resultatet visar att ASA 5510 presterar bättre än ASA 5506-X i alla kategorier.

Abstract [en]

The aim of this thesis was to compare the two Cisco firewalls ASA 5506-X and 5510 performances during two different DDoS attacks with out of the box settings. The thesis was done in a Cisco controlled environment at University West.

Botnets were created with the computers in this environment to carry out TCP and UDP flood attacks on both ASA devices and see which one would perform best under these circumstances. A total of eight figures are used to show the results of the tests, each containing averages compiled from ten measurements for each parameter.

ASA 5506-X has one core for the ASA itself with three additional cores using the Fire-power module, this however is not used out of the box for the ASA 5506-X, leaving it with as a single-core device. ASA 5510 does not have a Firepower module and runs a single-core. The single-core of the ASA 5506-X is not as fast as the ASA 5510 single-core.The results of this showed that the ASA 5510 outperformed the ASA 5506-X in all categories.

Place, publisher, year, edition, pages
2022. , p. 19
Keywords [en]
IT-security, Cisco ASA, DDoS, TCP, UDP
Keywords [sv]
IT-säkerthet, Cisco ASA, DDoS, TCP, UDP
National Category
Computer Systems
Identifiers
URN: urn:nbn:se:hv:diva-19056Local ID: EXN300OAI: oai:DiVA.org:hv-19056DiVA, id: diva2:1687219
Subject / course
Computer engineering
Educational program
Nätverksteknik med IT-säkerhet
Supervisors
Examiners
Available from: 2022-08-15 Created: 2022-08-15 Last updated: 2023-05-31Bibliographically approved

Open Access in DiVA

No full text in DiVA

By organisation
Department of Engineering Science
Computer Systems

Search outside of DiVA

GoogleGoogle Scholar

urn-nbn

Altmetric score

urn-nbn
Total: 180 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf