High-speed router filter for blocking TCP flooding under DDoS attack

Yoohwan Kim; Ju Yeon Jo; H. Jonathan Chao; Frank Merat

High-speed router filter for blocking TCP flooding under DDoS attack

Yoohwan Kim, Ju Yeon Jo, H. Jonathan Chao, Frank Merat

Electrical and Computer Engineering

Research output: Contribution to conference › Paper › peer-review

Abstract

We present a hardware solution that can reliably block most of the malicious TCP traffic at the edge routers while passing the legitimate TCP traffic during the Distributed Denial-of-Service (DDoS) attack. By allocating bandwidths separately for TCP, and TCP portion of the bandwidth can be protected. In simulation study, the filter successfully blocked 99.9% of the attack traffic while legitimate traffic showed nearly identical performance as in the non-attacked condition. This filtering is transparent to the hosts or routers and a filtering device can be easily attached to router ports.

Original language	English (US)
Pages	183-190
Number of pages	8
State	Published - 2003
Event	22nd IEEE International Performance, Computing, and Communications Conference - Phoenix, AZ, United States Duration: Apr 9 2003 → Apr 11 2003

Other

Other	22nd IEEE International Performance, Computing, and Communications Conference
Country/Territory	United States
City	Phoenix, AZ
Period	4/9/03 → 4/11/03

ASJC Scopus subject areas

Media Technology

Cite this

@conference{c04eb3bfbe3b4338ad7b18b3e60c5ece,

title = "High-speed router filter for blocking TCP flooding under DDoS attack",

abstract = "We present a hardware solution that can reliably block most of the malicious TCP traffic at the edge routers while passing the legitimate TCP traffic during the Distributed Denial-of-Service (DDoS) attack. By allocating bandwidths separately for TCP, and TCP portion of the bandwidth can be protected. In simulation study, the filter successfully blocked 99.9% of the attack traffic while legitimate traffic showed nearly identical performance as in the non-attacked condition. This filtering is transparent to the hosts or routers and a filtering device can be easily attached to router ports.",

author = "Yoohwan Kim and Jo, {Ju Yeon} and Chao, {H. Jonathan} and Frank Merat",

year = "2003",

language = "English (US)",

pages = "183--190",

note = "22nd IEEE International Performance, Computing, and Communications Conference ; Conference date: 09-04-2003 Through 11-04-2003",

}

TY - CONF

T1 - High-speed router filter for blocking TCP flooding under DDoS attack

AU - Kim, Yoohwan

AU - Jo, Ju Yeon

AU - Chao, H. Jonathan

AU - Merat, Frank

PY - 2003

Y1 - 2003

N2 - We present a hardware solution that can reliably block most of the malicious TCP traffic at the edge routers while passing the legitimate TCP traffic during the Distributed Denial-of-Service (DDoS) attack. By allocating bandwidths separately for TCP, and TCP portion of the bandwidth can be protected. In simulation study, the filter successfully blocked 99.9% of the attack traffic while legitimate traffic showed nearly identical performance as in the non-attacked condition. This filtering is transparent to the hosts or routers and a filtering device can be easily attached to router ports.

AB - We present a hardware solution that can reliably block most of the malicious TCP traffic at the edge routers while passing the legitimate TCP traffic during the Distributed Denial-of-Service (DDoS) attack. By allocating bandwidths separately for TCP, and TCP portion of the bandwidth can be protected. In simulation study, the filter successfully blocked 99.9% of the attack traffic while legitimate traffic showed nearly identical performance as in the non-attacked condition. This filtering is transparent to the hosts or routers and a filtering device can be easily attached to router ports.

UR - http://www.scopus.com/inward/record.url?scp=0038445134&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=0038445134&partnerID=8YFLogxK

M3 - Paper

AN - SCOPUS:0038445134

SP - 183

EP - 190

T2 - 22nd IEEE International Performance, Computing, and Communications Conference

Y2 - 9 April 2003 through 11 April 2003

ER -

High-speed router filter for blocking TCP flooding under DDoS attack

Abstract

Other

ASJC Scopus subject areas

Other files and links

Fingerprint

Cite this