Computer Science – Networking and Internet Architecture
Scientific paper
2011-10-05
Computer Science
Networking and Internet Architecture
18 pages
Scientific paper
Distributed Denial of Service (DDoS) attacks form one of the most serious threats that plague the Internet today. However, despite over a decade of research, and the existence of several proposals to address this problem, there has been little progress to date on actual adoption. In this work, we argue that adoption would be simplified by lowering the cost of deployment. Towards this goal, we present Mirage, an approach to DDoS defense that lowers the cost of adoption. Mirage achieves comparable performance to other DDoS mitigation schemes while providing benefits when deployed only in the server's local network and its upstream ISP, where local business objectives may incentivize deployment. In particular, Mirage does not require source end hosts to install any software to access Mirage protected websites. Unlike previous proposals, Mirage only requires functionality from routers that is already deployed in today's routers, though this functionality may need to be scaled depending on the point of deployment. Our key approach in this architecture is that end hosts can thwart the attackers by employing the principle of a moving target: end hosts in our architecture periodically change IP addresses to keep the attackers guessing. Knowledge of an active IP address of the destination end host can act as an implicit authorization to send data. We evaluate Mirage using theoretical analysis, simulations and a prototype implementation on PlanetLab. We find that our design provides a first step towards a deployable, yet effective DDoS defense.
Caesar Matthew
Hu Yih-Chun
Kim Dongho
Mittal Prateek
No associations
LandOfFree
Towards Deployable DDoS Defense for Web Applications does not yet have a rating. At this time, there are no reviews or comments for this scientific paper.
If you have personal experience with Towards Deployable DDoS Defense for Web Applications, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Towards Deployable DDoS Defense for Web Applications will most certainly appreciate the feedback.
Profile ID: LFWR-SCP-O-325921