상세정보
학술대회
MF (Minority First) scheme for defeating distributed denial of service attacks
- 발행일
- 200307
- 출처
- International Symposium on Computers and Communications (ISCC) 2003, pp.1-6
- 협약과제
- 03MK1100, 고성능 네트워크 정보보호시스템 개발, 박치항
- 초록
- The one of the biggest barrier that hinders Internet development is security problem caused by malicious user. In this paper, we deal with distributed denial of service (DDoS) attacks that monopolize network resource, thus result in network or system congestion. Under DDoS attack, its very difficult to provide legitimate users with their fair share of available network resource. This paper proposes MF (minority first) as a traffic metering and control scheme that can provide quick weakness of DDoS attack, while protecting legitimate user's traffic. The key idea of MF scheme is to provide good quality of service (QoS) to sources that use the network resource properly and poor QoS to sources that use network resource so excessively as to result in network congestion. MF scheme is composed of both source-traffic-trunk based metering and queue mapping mechanism for controlling malicious DDoS traffic and legitimate traffic. To show our scheme's excellence, its performance is measured and compared with that of the existing queuing services and static rate-limit through simulation. © 2003 IEEE.
- KSP 제안 키워드
- Control scheme, Distributed Denial of Service attacks, Distributed denial of service (DDoS) attacks, IS security, Malicious user, Mapping mechanism, Network Congestion, Network resources, Traffic metering, denial of service(DoS), quality of service(QoS)