FOSeL: Filtering by Helping an Overlay Security Layer to Mitigate DoS Attacks

Denial of service (DoS) attacks are major threat against availability in the Internet. A large number of countermeasure techniques try to detect attack and then filter out DoS attack packets. Unfortunately these techniques that filter DoS traffic by looking at known attack patterns or statistical anomalies in the traffic patterns can be defeated by changing the attack patterns and masking the anomalies that are sought by the filter. Hence, detecting DoS traffic is one of the main challenges for filtering techniques. Furthermore techniques that drop any malicious packet need to process the packet and processing is time-consuming. This paper addresses how an efficient and good filter can be designed by helping an overlay network layer to mitigate DoS attacks. Fosel (Filtering by helping an Overlay Security Layer) filter is independent from DoS attack types, so we do not worry about the changing attack patterns. Furthermore it reduces processing time noticeably. Through simulat...

• Type: Conference
• Year: 2008
• Where: NCA
• Authors: Hakem Beitollahi, Geert Deconinck
• Keywords: Attack Patterns, DoS Attack Packets, DoS Attacks, NCA 2008, Network Computing