Loading...
Please wait, while we are loading the content...
Similar Documents
IP Traceback-based Intelligent Packet Filtering: A Novel Technique for Defending against Internet DDoS Attacks (2002)
| Content Provider | CiteSeerX |
|---|---|
| Author | Sung, Minho Xu, Jun |
| Description | Distributed Denial of service (DDoS) is one of the most difficult security problems to address. While many existing techniques (e.g., IP traceback) focus on tracking the location of the attackers after-the-fact, little is done to mitigate the effect of an attack while it is raging on. In this paper, we present a novel technique that can effectively filter out the majority of DDoS traffic, thus improving the overall throughput of the legitimate traffic. The proposed scheme leverages on and generalizes the IP traceback schemes to obtain the information concerning whether a network edge is on the attacking path of an attacker ("infected") or not ("clean"). We observe that while an attacker will have all the edges on its path marked as "infected", edges on the path of a legitimate client will mostly be "clean". By preferentially filtering out packets that are inscribed with the marks of "infected" edges, the proposed scheme removes most of the DDoS traffic while affecting legitimate traffic only slightly. Simulation results based on real-world network topologies all demonstrate that the proposed technique can improve the throughput of legitimate traffic by 3 to 7 times during DDoS attacks. |
| File Format | |
| Journal | IEEE Transactions on Parallel and Distributed Systems |
| Language | English |
| Publisher Date | 2002-01-01 |
| Access Restriction | Open |
| Subject Keyword | Legitimate Traffic Ip Traceback-based Intelligent Packet Filtering Real-world Network Topology Ddos Attack Difficult Security Problem Overall Throughput Ip Traceback Scheme Legitimate Client Proposed Scheme Simulation Result Novel Technique Network Edge Ip Traceback Ddos Traffic Internet Ddos Attack |
| Content Type | Text |
| Resource Type | Article |
