Active Internet Traffic Filtering: Real-time Response to Denial of Service Attacks

Details Active Internet Traffic Filtering: Real-time Response to Denial of Service Attacks Active Internet Traffic Filtering: Real-time Response to Denial of Service Attacks

2003-09-29

arxiv.org/abs/cs/0309054v1

Proc. USENIX Annual Technical Conference, April 2005 and IEEE/ACM Transactions on Networking, 17(4):1284-1297, August 2009

Computer Science

Networking and Internet Architecture

Briefly describes the core ideas of AITF, a protocol for facing Denial of Service Attacks. 6 pages long

Scientific paper

Denial of Service (DoS) attacks are one of the most challenging threats to Internet security. An attacker typically compromises a large number of vulnerable hosts and uses them to flood the victim's site with malicious traffic, clogging its tail circuit and interfering with normal traffic. At present, the network operator of a site under attack has no other resolution but to respond manually by inserting filters in the appropriate edge routers to drop attack traffic. However, as DoS attacks become increasingly sophisticated, manual filter propagation becomes unacceptably slow or even infeasible. In this paper, we present Active Internet Traffic Filtering, a new automatic filter propagation protocol. We argue that this system provides a guaranteed, significant level of protection against DoS attacks in exchange for a reasonable, bounded amount of router resources. We also argue that the proposed system cannot be abused by a malicious node to interfere with normal Internet operation. Finally, we argue that it retains its efficiency in the face of continued Internet growth.

Affiliated with

Also associated with

No associations

Rating

Active Internet Traffic Filtering: Real-time Response to Denial of Service Attacks does not yet have a rating. At this time, there are no reviews or comments for this scientific paper.

If you have personal experience with Active Internet Traffic Filtering: Real-time Response to Denial of Service Attacks, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Active Internet Traffic Filtering: Real-time Response to Denial of Service Attacks will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFWR-SCP-O-370748