Sciweavers

Share
ISW
2005
Springer

gore: Routing-Assisted Defense Against DDoS Attacks

9 years 9 months ago
gore: Routing-Assisted Defense Against DDoS Attacks
Abstract. We present gore, a routing-assisted defense architecture against distributed denial of service (DDoS) attacks that provides guaranteed levels of access to a network under attack. Our approach uses routing to redirect all traffic destined to a customer under attack to strategically-located gore proxies, where servers filter out attack traffic and forward authorized traffic toward its intended destination. Our architecture can be deployed incrementally by individual ISPs, does not require any collaboration between ISPs, and requires no modifications to either server- or client- software. Clients can be authorized through a web interface that screens legitimate users from outsiders or automated zombies. Authenticated clients are granted limited-time access to the network under attack. The gore architecture allows ISPs to offer DDoS defenses as a value-added service, providing necessary incentives for the deployment of such defenses. We constructed a PC-based testbed to eval...
Stephen T. Chou, Angelos Stavrou, John Ioannidis,
Added 28 Jun 2010
Updated 28 Jun 2010
Type Conference
Year 2005
Where ISW
Authors Stephen T. Chou, Angelos Stavrou, John Ioannidis, Angelos D. Keromytis
Comments (0)
books