Attacking DDoS at the Source

DMCA

Attacking DDoS at the Source (2002)

Cached

Download Links

Other Repositories/Bibliography

DBLP

by Jelena Mirkovic , Gregory Prier , Peter Reiher

Citations:

173 - 9 self

BibTeX

@MISC{Mirkovic02attackingddos,
    author = {Jelena Mirkovic and Gregory Prier and Peter Reiher},
    title = {Attacking DDoS at the Source},
    year = {2002}
}

OpenURL

Abstract

Distributed denial-of-service (DDoS) attacks present an Internet-wide threat. We propose D-WARD, a DDoS defense system deployed at source-end networks that autonomously detects and stops attacks originating from these networks. Attacks are detected by the constant monitoring of two-way traffic flows between the network and the rest of the Internet and periodic comparison with normal flow models. Mismatching flows are rate-limited in proportion to their aggressiveness. D-WARD offers good service to legitimate traffic even during an attack, while effectively reducing DDoS traffic to a negligible level. A prototype of the system has been built in a Linux router. We show its effectiveness in various attack scenarios, discuss motivations for deployment, and describe associated costs.

Keyphrases

d-ward offer good service internet-wide threat constant monitoring various attack scenario ddos traffic discus motivation negligible level periodic comparison source-end network two-way traffic normal flow model linux router ddos defense system

DMCA