23- https://doi.org/10.1145/1162666.1162674
Protecting TCP services from denial of service attacks
- Sep 11, 2006
- Hikmat Farhat
In this paper, we present a scheme that protects legitimate traffic from the large volume of attackers packets during a DDoS attack. Legitimate packets can be recognized by the tokens they carry in the IP header. Obtaining a token does not require protocol additions or changes, rather it is automatically obtained when a TCP connection is established. We believe that the Implicit Token Scheme (ITS) has numerous advantages: (1) It is totally transparent to clients. (2) No new protocols or modification of existing ones is needed to implement ITS. (3) Operations required by intermediate routers are computationally not more intensive than a couple of addition operations which could be easily done at wire-speed. (4) Does not lead to false positives. (5) Can sustain server availability even during attacks involving hundreds of thousands of attackers.
- # Denial Of Service Attacks
- # Legitimate Packets
- # IP Header
- # Intermediate Routers
- # DDoS Attack
- # TCP Connection
- # Implicit Token
- # TCP Services
- # Token Scheme
- # Server Availability
