A Distributed Defensive Architecture for DoS/DDoS Attacks

S. Malliga and A. Tamilarasi

Journal of Information Privacy and Security, 2008, vol. 4, issue 4, 21-44

Abstract: Denial of Service (DoS) and Distributed DoS (DDoS) attacks pose a great security threat to the availability of Internet resources to users. Despite research efforts, progress in solving these flooding attacks is limited. Present techniques place the burden of detection on the violated machines. To address this situation, an integrated defense solution, implemented in a distributed manner throughout the network to prevent, detect, filter and rate limit is essential. Such a distributed system requires integration of various components to perform the aforementioned tasks. This paper advocates a distributed architecture of heterogeneous entities, placed at various points of a network working co-operatively to yield an effective defense against the attacks. Through analysis, we prove our system offers very little bandwidth to attack traffic while maximizing the bandwidth to legitimate traffic. Our system also saves significant CPU cycles by detecting and filtering the spoofed traffic at the earliest possible time. Instead of a single point of deployment, we find that this shift to a new paradigm outperforms the previously existing techniques.

Date: 2008
References: Add references at CitEc
Citations:

Downloads: (external link)
http://hdl.handle.net/10.1080/2333696X.2008.10855850 (text/html)
Access to full text is restricted to subscribers.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:taf:uipsxx:v:4:y:2008:i:4:p:21-44

Ordering information: This journal article can be ordered from
http://www.tandfonline.com/pricing/journal/uips20

DOI: 10.1080/2333696X.2008.10855850

Access Statistics for this article

Journal of Information Privacy and Security is currently edited by Chuleeporn Changchit

More articles in Journal of Information Privacy and Security from Taylor & Francis Journals
Bibliographic data for series maintained by Chris Longhurst ().