A Distributed Mechanism to Protect Against DDoS Attacks - Data and Applications Security and Privacy XXXI
Conference Papers Year : 2017

A Distributed Mechanism to Protect Against DDoS Attacks

Negar Mosharraf
  • Function : Author
  • PersonId : 1026656
Anura P. Jayasumana
  • Function : Author
  • PersonId : 1026657
Indrakshi Ray
  • Function : Author
  • PersonId : 1026658

Abstract

Distributed Denial of Service (DDoS) attacks remain one of the most serious threats on the Internet. Combating such attacks to protect the victim and network infrastructure requires a distributed real-time defense mechanism. We propose Responsive Point Identification using Hop distance and Attack estimation rate (RPI-HA) that when deployed is able to filter out attack traffic and allow legitimate traffic in the event of an attack. It dynamically activates detection and blocks attack traffic while allowing legitimate traffic, as close to the source nodes as possible so that network resources are not wasted in propagating the attack. RPI-HA identifies the most effective points in the network where the filter can be placed to minimize attack traffic in the network and maximize legitimate traffic for the victim during the attack period. Extensive OPNET$$^{\copyright }$$ based simulations with a real network topology and CAIDA attack data set shows that the method is able to place all filtering routers within three routers of the attacker nodes and stop 95% of attack traffic while allowing 77% of legitimate traffic to reach victim node.
Fichier principal
Vignette du fichier
453481_1_En_29_Chapter.pdf (1.38 Mo) Télécharger le fichier
Origin Files produced by the author(s)
Loading...

Dates and versions

hal-01684374 , version 1 (15-01-2018)

Licence

Identifiers

Cite

Negar Mosharraf, Anura P. Jayasumana, Indrakshi Ray. A Distributed Mechanism to Protect Against DDoS Attacks. 31th IFIP Annual Conference on Data and Applications Security and Privacy (DBSEC), Jul 2017, Philadelphia, PA, United States. pp.529-540, ⟨10.1007/978-3-319-61176-1_29⟩. ⟨hal-01684374⟩
136 View
85 Download

Altmetric

Share

More