A Practical Method to Counteract Denial of Service Attacks

Today distributed denial of service (DDoS) attacks are causing major problems to conduct online business over the Internet. Recently several schemes have been proposed on how to prevent some of these attacks, but they suffer from a range of problems, some of them being impractical and others not being effective against these attacks. In this paper, we propose a ControllerAgent model that would greatly minimize DDoS attacks on Internet. With a new packet marking technique and agent design our scheme is able to identify the approximate source of attack (nearest router) with a single packet even in case of attack with spoofed source addresses. Our scheme is invoked only during attack times, is able to process the victims traffic separately without disturbing other traffic, is able to establish different attack signatures for different attacking sources, can prevent the attack traffic at the nearest router to the attacking system, has fast response time, is simple in its implementation an...

• Type: Conference
• Year: 2003
• Where: ACSC
• Authors: Udaya Kiran Tupakula, Vijay Varadharajan
• Keywords: ACSC 2003, Computer Science, DDoS Attacks, Nearest Router, Today Distributed Denial