loading...
MF (Minority First) Scheme for defeating Distributed Denial of Service Attacks
Kemer-Antalya, Turkey June 30-July 03
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ISCC.2003.1214283Eighth IEEE Symposium on Computers an ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Gaeil Ahn, Electronics and Telecommunications Research Institute
Kiyoung Kim, Electronics and Telecommunications Research Institute
Jongsoo Jang, Electronics and Telecommunications Research Institute
The one of the biggest barrier that hinders Internet development is security problem caused by malicious user. In this paper, we deal with Distributed Denial of Service (DDoS) attacks that monopolize network resource, thus result in network or system congestion. Under DDoS attack, it's very difficult to provide legitimate users with their fair share of available network resource. This paper proposes MF (Minority First) as a traffic metering and control scheme that can provide quick weakness of DDoS attack, while protecting legitimate user's traffic. The key idea of MF scheme is to provide good quality of service (QoS) to sources that use the network resource properly and poor QoS to sources that use network resource so excessively as to result in network congestion. MF scheme is composed of both source-traffic-trunk based metering and queue mapping mechanism for controlling malicious DDoS traffic and legitimate traffic. To show our scheme's excellence, its performance is measured and compared with that of the existing queuing services and static rate-limit through simulation.
Citation:
Gaeil Ahn, Kiyoung Kim, Jongsoo Jang, "MF (Minority First) Scheme for defeating Distributed Denial of Service Attacks," iscc, pp.1233, Eighth IEEE Symposium on Computers and Communications, 2003
Usage of this product signifies your acceptance of the Terms of Use.


Suggestions