A backpressure technique for filtering spoofed traffic at upstream routers. (4th January 2010)

• Record Type: Journal Article
• Authors: Malliga, S.; Tamilarasi, A.
• Is Part Of: International journal of security and networks. Volume 5:Number 1(2010)
• Page Start: 3
• Page End: 14
• Publication Date: 2010-01-04
• Subjects: DoS attacks -- denial of service -- security -- packet marking -- hop count -- backpressure -- partial deployment -- DoS attack traffic filtering -- detection accuracy -- simulation -- DoS attack detection; Computer networks -- Security measures -- Periodicals; 005.805
• Languages: English
• ISSNs: 1747-8405

Abstract

Ever increasing rate of Denial of Service (DoS) attacks presents severe security threats to the internet. In this study, a backpressure scheme to filter DoS attack traffic at the earliest possible is presented. This paper utilises markings stamped in the packets by the routers to detect DoS attacks. To improve the accuracy of detection, the detection process is augmented with hop count values from IP header. A backpressure technique partially deployed at the upstream routers is also proposed to prevent congestion at victim. Simulation studies show that our scheme drops most of the attack traffic at the earliest time.