A DDOS defence scheme based on two-stage traffic flow control. (1st January 2014)

• Record Type: Journal Article
• Authors: Li, Qingxia; Wei, Wenhong; Tao, Ming; Chen, Qian
• Is Part Of: International journal of communication networks and distributed systems. Volume 13:Number 3/4(2014)
• Page Start: 290
• Page End: 300
• Publication Date: 2014-01-01
• Subjects: distributed denial of service -- DDoS -- traffic flow control -- network simulator -- intrusion detection; Computer networks -- Periodicals; Telecommunication systems -- Periodicals; Electronic data processing -- Distributed processing -- Periodicals; 004.6
• Languages: English
• ISSNs: 1754-3916

Abstract

In distributed denial of service (DDoS) attack, the detection techniques have existed for a relatively longer period of time than defence mechanisms, researchers have categorised almost all the existing and expected forthcoming attacks. However, techniques for defence are still nurturing. Researchers have explored that there could be diverse ways of launching DDoS attacks. Consequently, need of defence scheme that adapts and responds autonomously to these variety of attacks is imperative. This paper proposed a distributed defence scheme based on two-stage traffic flow control against DDoS attacks that present the most serious threats to the internet. The defence using this scheme deploys two kinds of coordinated modules through specific mechanism to protect internet servers. And the performance of the scheme was evaluated by network simulation. Simulation results show that the proposed scheme can greatly increase the throughput of legitimate traffic and reduce the attack traffic during DDos attacks, and it performs well even when it is only partially deployed.