The DRR-based Approach of Defending against LDoS

摘要：

The low-rate denial of service (LDoS) attack is known as a low-rate TCP attack with essentially a periodic short burst, which exploits the homogeneity of the minimum retransmission timeout (RTO) of TCP flows and forces all affected TCP flows to back off and enter the retransmission timeout state. LDoS attack is new threat to Internet and ISP service. This paper adopts the deficit round robin (DRR) algorithm to defend against LDoS attack. DRR algorithm provides bandwidth allocation and protection between flows to improve the throughput of all the TCP flow. Experiments on single low-rate attack on single TCP flow and multiple TCP flows show that DRR has an expected effect on resisting LDoS attack.

关键词： low-rate DoS (LDoS) DRR fairness

作者: Jin LEI Xingchen LIU

作者单位: Tianjin Key Laboratory for Advanced Signal Processing Civil Aviation University of China Tianjin, China, 300300

会议类型: 国际会议

会议名称: 2010 IEEE International Conference on Intelligent Computing and Intelligent Systems(2010 IEEE 智能计算与智能系统国际会议 ICIS 2010)

会议地点: 厦门

会议语种:英文

页码: 11-13

在线出版日期: 2010-10-29（万方平台首次上网日期，不代表论文的发表时间）