Controlling high bandwidth aggregates in the network

DMCA

Controlling high bandwidth aggregates in the network (2002)

Cached

Download Links

Other Repositories/Bibliography

DBLP

by Ratul Mahajan , Steven M. Bellovin , Sally Floyd , John Ioannidis , Vern Paxson , Scott Shenker

Venue:	ACM Computer Communication Review
Citations:	307 - 10 self

BibTeX

@ARTICLE{Mahajan02controllinghigh,
    author = {Ratul Mahajan and Steven M. Bellovin and Sally Floyd and John Ioannidis and Vern Paxson and Scott Shenker},
    title = {Controlling high bandwidth aggregates in the network},
    journal = {ACM Computer Communication Review},
    year = {2002},
    volume = {32},
    pages = {62--73}
}

OpenURL

Abstract

The current Internet infrastructure has very few built-in protection mechanisms, and is therefore vulnerable to attacks and failures. In particular, recent events have illustrated the Internet’s vulnerability to both denial of service (DoS) attacks and flash crowds in which one or more links in the network (or servers at the edge of the network) become severely congested. In both DoS attacks and flash crowds the congestion is due neither to a single flow, nor to a general increase in traffic, but to a well-defined subset of the traffic – an aggregate. This paper proposes mechanisms for detecting and controlling such high bandwidth aggregates. Our design involves both a local mechanism for detecting and controlling an aggregate at a single router, and a cooperative pushback mechanism in which a router can ask upstream routers to control an aggregate. The presentation in this paper is a first step towards a more rigorous evaluation of these mechanisms. While certainly not a panacea, these mechanisms could provide some needed relief from flash crowds and flooding-style DoS attacks. 1

Keyphrases

high bandwidth aggregate flash crowd general increase local mechanism single router recent event do attack internet vulnerability first step cooperative pushback mechanism upstream router current internet infrastructure flooding-style do attack built-in protection mechanism single flow needed relief well-defined subset rigorous evaluation

DMCA