Queue Management as a DoS Counter-Measure?

In this paper, we study the performance of timeout-based queue management practices in the context of flood denial-of-service (DoS) attacks on connection-oriented protocols, where server resources are depleted by uncompleted illegitimate requests generated by the attacker. This includes both crippling DoS attacks where services become unavailable and Quality of Service (QoS) degradation attacks. While these queue management strategies were not initially designed for DoS attack protection purposes, they do have the desirable side-effect or providing some protection against them, since illegitimate requests time out more often than legitimate ones. While this fact is intuitive and wellknown, very few quantitative results have been published on the potential impact on DoS-attack resilience of various queue management strategies and the associated configuration parameters. We report on the relative performance of various queue strategies under a varying range of attack rates and paramet...

• Type: Conference
• Year: 2007
• Where: ISW
• Authors: Daniel Boteanu, José M. Fernandez, John McHugh, John Mullins
• Keywords: ISW 2007, Queue Management, Queue Management Strategies, Various Queue