Triple DoS: DDoS defence and traceback. (1st January 2013)

• Record Type: Journal Article
• Authors: Doyal, Alex; Zhan, Justin
• Is Part Of: International journal of information privacy, security and integrity. Volume 1:Number 4(2013)
• Page Start: 299
• Page End: 311
• Publication Date: 2013-01-01
• Subjects: denial of service -- DoS -- traceback -- information assurance -- defence; Computer security -- Periodicals; Computer networks -- Access control -- Periodicals; Information technology -- Security measures -- Periodicals; Data protection -- Periodicals; Privacy, Right of -- Periodicals; 005.805
• Languages: English
• ISSNs: 1741-8496

Abstract

Distributed denial of service (DDoS) attacks occur when a host of compromised systems are used to target a single system. This single system can be either an actual machine or a network resource. These attacks are prevalent and hard to deal with because they are distributed. They come from many machines, making them hard to trace and even harder to counter. There are also a host of tools available which make it easier for an attacker to launch a DDoS attack. This ubiquity is increasing the level of difficulty related to defending against these attacks. This paper proposes a mechanism, DDDoS, or triple DoS, to deal with DDoS attacks on the internet layer. There are registration and authentication protocols to connect clients and servers so that an unregistered client cannot access the network and flood it with traffic. The triple DoS service will be activated only when a DDoS attack is detected (using clustering), and it will ensure that registered clients and servers can always communicate. It includes a tracing mechanism to allow the originator of the DDoS attack to be identified.