Defending networks against denial-of-service attacks

Details Defending networks against denial-of-service attacks Defending networks against denial-of-service attacks

Nov 2004

adsabs.harvard.edu/cgi-bin/nph-data_query?bibcode=2004spie.5611..233g&link_type=abstract

Unmanned/Unattended Sensors and Sensor Networks. Edited by Carapezza, Edward M. Proceedings of the SPIE, Volume 5611, pp. 233

Other

Scientific paper

Denial of service attacks, viruses and worms are common tools for malicious adversarial behavior in networks. Experience shows that over the last few years several of these techniques have probably been used by governments to impair the Internet communications of various entities, and we can expect that these and other information warfare tools will be used increasingly as part of hostile behavior either independently, or in conjunction with other forms of attack in conventional or asymmetric warfare, as well as in other forms of malicious behavior. In this paper we concentrate on Distributed Denial of Service Attacks (DDoS) where one or more attackers generate flooding traffic and direct it from multiple sources towards a set of selected nodes or IP addresses in the Internet. We first briefly survey the literature on the subject, and discuss some examples of DDoS incidents. We then present a technique that can be used for DDoS protection based on creating islands of protection around a critical information infrastructure. This technique, that we call the CPN-DoS-DT (Cognitive Packet Networks DoS Defence Technique), creates a self-monitoring sub-network surrounding each critical infrastructure node. CPN-DoS-DT is triggered by a DDoS detection scheme, and generates control traffic from the objects of the DDoS attack to the islands of protection where DDOS packet flows are destroyed before they reach the critical infrastructure. We use mathematical modelling, simulation and experiments on our test-bed to show the positive and negative outcomes that may result from both the attack, and the CPN-DoS-DT protection mechanism, due to imperfect detection and false alarms.

Affiliated with

Also associated with

No associations

Rating

Defending networks against denial-of-service attacks does not yet have a rating. At this time, there are no reviews or comments for this scientific paper.

If you have personal experience with Defending networks against denial-of-service attacks, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Defending networks against denial-of-service attacks will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFWR-SCP-O-1057905