An Adaptable Inter-Domain Infrastructure Against DoS Attacks

Denial of Service Attacks have evolved to be one serious threat for Internet activities. Their massive, distributed, and hard to trace nature makes them impossible to be countered by the efforts of a single site. This paper presents an interdomain infrastructure that aims to coordinate detection and response to such attacks. The main building block of the design is a lightweight software platform installed at each participating domain that provides messaging and alert services and the point of coordinated response control. We describe the operation of this Cooperative IDS Entity and focus on its policy control features. The response capability that enables an effective cooperation is adaptable to suit the security policies and needs at each site.