Sciweavers

TON
2008

TVA: a DoS-limiting network architecture

13 years 3 months ago
TVA: a DoS-limiting network architecture
We motivate the capability approach to network denial-of-service (DoS) attacks, and evaluate the TVA architecture which builds on capabilities. With our approach, rather than send packets to any destination at any time, senders must first obtain "permission to send" from the receiver, which provides the permission in the form of capabilities to those senders whose traffic it agrees to accept. The senders then include these capabilities in packets. This enables verification points distributed around the network to check that traffic has been authorized by the receiver and the path in between, and hence to cleanly discard unauthorized traffic. To evaluate this approach, and to understand the detailed operation of capabilities, we developed a network architecture called TVA. TVA addresses a wide range of possible attacks against communication between pairs of hosts, including spoofed packet floods, network and host bottlenecks, and router state exhaustion. We use simulations to ...
Xiaowei Yang, David Wetherall, Thomas E. Anderson
Added 15 Dec 2010
Updated 15 Dec 2010
Type Journal
Year 2008
Where TON
Authors Xiaowei Yang, David Wetherall, Thomas E. Anderson
Comments (0)