A Utility-Optimal Defense Mechanism for Distributed Denial-of-Service

摘要：

Distributed denial-of-service (DDoS) attack is an attempt to make a computer resource unavailable to its legitimate users. A lot of research on DDoS has been done, but all of them focus on detection and response. In this paper, we view DDoS attacks as a resource allocation problem, and present a framework of network utility maximization for bandwidth allocation of network resources to prevent DDoS attacks. This is a flexible adjustment mechanism, which adopt a proactive defense mechanism while it can well adapt to burst traffic flow and reduce false positives.

关键词： Distributed denial-of-service bandwidth allocation optimization network utility

作者: Yunmeng Tan Shengbin Liao Bo Cheng

作者单位: Department of Electronics and Information Engineering, Huazhong University of Science and Technology Engineering and Research Center of Information and Technology on Education, Huazhong Normal Universi Wuhan Second Ship Design & Research Institute, Wuhan, China

会议类型: 国际会议

会议名称: 2010 International Conference on Future Information Technology(2010年未来信息技术国际会议 ICFIT 2010)

会议地点: 长沙

会议语种:英文

页码: 139-143

在线出版日期: 2010-12-14（万方平台首次上网日期，不代表论文的发表时间）