Please use this identifier to cite or link to this item:
|Title:||Defeating Reflector based Denial-of-Service Attacks using Single Packet Filters|
|Authors:||Sairam A.S., A. S.|
Subramaniam A., A.
|Abstract:||Denial-of-Service (DoS) and Distributed Denial-of-Service (DDoS) attacks are becoming increasingly sophisticated with few practical solutions available. In this paper we consider the issue of filtering reflector based DoS attacks and of identifying attackers. For reflector based attacks, a Signature Conflict Triggered Filtering (SCTF) () scheme based on Deterministic Edge Router Marking (DERM) () was proposed. We suggest an enhancement to make the 3-way handshake in SCTF stateless and call it Fast-SCTF. We then propose a framework using BGP for a single-packet handshake.We demonstrate that our proposed scheme is space efficient, more secure, robust and it requires very little cooperation among autonomous systems.|
|Appears in Collections:||2010|
Files in This Item:
There are no files associated with this item.
Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.