论文信息 - Practical techniques for defending against DDoS attacks

Practical techniques for defending against DDoS attacks

Summary form only given. Distributed denial of service (DDoS) attack is one of the most alarming threats on the Internet. DDoS attacks exhaust the critical resources of a target server in order to deny its services to the legitimate clients. In this paper, we propose a full set of techniques for defending against DDoS attacks. The complete countermeasure strategies are broken down to detection, segregation and mitigation techniques. Detection techniques are used to determine if any attack is taking place at any given moment. Segregation techniques aim to separate malicious traffic from legitimate traffic. Finally, the mitigation techniques are used to effectively minimizing the negative impact caused by DDoS attacks.

E. Y. Chen | A. Yonezawa

[1] George Kurtz,et al. Hacking Exposed: Network Security Secrets & Solutions , 1999 .

[2] Stuart McClure,et al. Hacking Exposed: Network Security Secrets and Solutions, Fourth Edition , 2001 .

[3] Donald R. Morrison,et al. PATRICIA—Practical Algorithm To Retrieve Information Coded in Alphanumeric , 1968, J. ACM.

[4] Arnt Brox. Signature-based or anomaly-based intrusion detection: the practice and pitfalls , 2002 .

[5] Wojciech Szpankowski,et al. Patricia tries again revisited , 1990, JACM.

[6] Stefan Savage,et al. Inferring Internet denial-of-service activity , 2001, TOCS.

[7] Paul Ferguson,et al. Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing , 1998, RFC.

[8] Dan Schnackenberg,et al. Statistical approaches to DDoS attack detection and response , 2003, Proceedings DARPA Information Survivability Conference and Exposition.