NDLI: A Distributed Defense Framework for Flooding-Based DDoS Attacks

Content Provider	IEEE Xplore Digital Library
Author	Yonghua You Zulkernine, M. Haque, A.
Copyright Year	2008
Description	Author affiliation: Sch. of Comput., Queen's Univ., Kingston, ON (Yonghua You; Zulkernine, M.)
Abstract	A flooding-based distributed denial of service (DDoS) attack sends a large amount of unwanted traffic to a victim machine. Existing network-level congestion control mechanisms are inadequate in preventing service quality from deteriorating because of these attacks. We propose a distributed framework to defend against DDoS attacks. It has three major components: detection, traceback, and traffic control. We present the traffic control component in detail in this paper. A distance-based rate limit mechanism is proposed to allow the traffic control component at the victim end request the defense systems at the source end to set up rate limits on the edge routers of the attack source ends. This rate limit mechanism efficiently reduces attack traffic from being forwarded to the victim. We evaluate the DDoS defense framework using the NS2 platform. The results demonstrate that the framework can effectively control attack traffic to sustain quality of service for legitimate traffic compared to the pushback technique.
Starting Page	245
Ending Page	252
File Size	451210
Page Count	8
File Format	PDF
ISBN	9780769531021
DOI	10.1109/ARES.2008.69
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2008-03-04
Publisher Place	Spain
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Availability Intrusion Detection Quality of service Distributed Denial of Service History Computer crime Distributed computing Aggregates Traffic control Communication system traffic control Unwanted Traffic Internet Protection
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Packet filtering to defend flooding-based DDoS attacks [Internet denial-of-service attacks]

A Survey of Defense Mechanisms Against Distributed Denial of Service (DDoS) Flooding Attacks

Study of intrusion detection system for DDoS attacks in cloud computing

A Distributed Intrusion Detection System against flooding Denial of Services attacks

A Defense Framework for Flooding-based DDoS Attacks (2007)

A Method Based on AMHI for DDoS Attacks Detection and Defense

Proactive control of distributed denial of service attacks with source router preferential dropping

DATCONS: Protecting Web-Based QoS from DDoS Attacks

A Cooperative Mechanism to Defense against Distributed Denial of Service Attacks

A Distributed Defense Framework for Flooding-Based DDoS Attacks

Similar Documents

Packet filtering to defend flooding-based DDoS attacks [Internet denial-of-service attacks]

A Survey of Defense Mechanisms Against Distributed Denial of Service (DDoS) Flooding Attacks

Study of intrusion detection system for DDoS attacks in cloud computing

A Distributed Intrusion Detection System against flooding Denial of Services attacks

A Defense Framework for Flooding-based DDoS Attacks (2007)

A Method Based on AMHI for DDoS Attacks Detection and Defense

Proactive control of distributed denial of service attacks with source router preferential dropping

DATCONS: Protecting Web-Based QoS from DDoS Attacks

A Cooperative Mechanism to Defense against Distributed Denial of Service Attacks

A Distributed Defense Framework for Flooding-Based DDoS Attacks