A Game Theory based Rate Limiting Scheme against Distributed Denial-of-Service Attacks

摘要：

Distributed DenialofService (DDoS) attacks are a critical threat to the Internet. This paper introduces a novel DDoS defense scheme that supports automated online attack characterizations and accurate attack packet discarding based on game theory. The key idea is to formulate the bandwidth computing as a noncooperative game. And then a high volume of simulations is done to compute the Nash equilibria of the game. DDoS attacks and which kinds of attacking strategies are more dangerous or more likely to be enforced by the attacker are given in the simulations. Our method may substantially improve people’s understanding about the nature of the DDoS threat and the defense system’s resilience against this threat.

关键词： Nash equilibrium Game theory Rate limit Distributed Denial-of-Service Attacks

作者: Tian Zhihong Jiang Wei Wu Zhen Zou Xin

作者单位: Research Center of Computer Network and InformationSecurity TechnologyHarbin Institute of Technology National Computer network Emergency Responsetechnical Team/Coordination Center of ChinaBeijing, 1000 National Computer network Emergency Response technical Team/Coordination Center of China Beijing, 10

会议类型: 国际会议

会议名称: 2010 2nd IEEE International Conference on Information Management and Engineering(2010年IEEE第二届信息管理与工程国际会议 IEEE ICIME 2010)

会议地点: 成都

会议语种:英文

页码: 1-5

在线出版日期: 2010-04-16（万方平台首次上网日期，不代表论文的发表时间）