White Papers

Defending Against Distributed Denial-of-Service Attacks With Max-Min Fair Server-Centric Router Throttles

Overview This paper targets a network architecture and accompanying algorithms for countering Distributed Denial-of-Service (DDoS) attacks directed at an Internet server. The basic mechanism is for a server under stress to install a router throttle at selected upstream routers. The throttle can be the leaky-bucket rate at which a router can forward packets destined for the server. Hence, before aggressive packets can converge to overwhelm the server, participating routers proactively regulate the contributing packet rates to more moderate levels, thus forestalling an impending attack. In allocating the server capacity among the routers, they propose a notion of level-max-min fairness.

By downloading you agree to our Terms and Conditions. These include information regarding use of your personal data.

Publisher: Institute of Electrical and Electronics Engineers
File Format: PDF
Date Published: Oct 14, 2008
Format: White Papers
Topics: Denial of Service, Network Security

Similiar White Papers

Defending Against TCP SYN Flooding Attacks Under Different Types of IP Spoofing

TCP-based flooding attacks are a common form of Distributed Denial-of-Service (DDoS) attacks which abuse network resourc

Publisher: Wuhan University | Tags: data, ddos, ip, network, spoofing

Denial of Service and Distributed Denial of Service Protection

To obtain full protection for DoS attacks, organizations typically need to purchase multiple proxy servers, network secu

Publisher: 3Com | Tags: ddos, ips, network, network security, software, updates

X-Force®Threat Insight Quarterly Voice over Internet Protocol (VoIP) ? Find out what the threats and challenges are for anyone deploying VoIP

The X-Force Threat Insight Quarterly (Threat IQ) highlights the most significant threats and challenges facing security

Publisher: Internet Security Systems | Tags: homeland security, security flaws, voip

An independent report by ICSA Labs on the performance of ISS' VoIP-enabled Intrusion Prevention devices

This technical product evaluation is focused on the ISS VoIP-enabled Intrusion Prevention devices. These are built to su

Publisher: Internet Security Systems | Tags: voip

Secure Health Monitoring Network Against Denial-of-Service Attacks Using Cognitive Intelligence

Secure and energy efficient transmission is a main concern in many wireless sensor network applications. In this paper,

Publisher: Syracuse University | Tags: applications, network

Institute of Electrical and Electronics Engineers White Papers

Performance Evaluation for Remote Access VPNs on Windows Server 2003

Featured white papers

The Value of Location Intelligence in the Communications Industry

Pitney Bowes

Public Services are under pressure, the challenge is to do more with less. How do you improve citizen satisfaction, increase cost efficiencies and improve service delivery? The power of location intelligence is helping many local authorities...

Download now »
Best Practices for Translating Customer Satisfaction into Revenue

Citrix Online

Today's support organisations are focused on two top-level metrics: financial results and customer satisfaction. For most, it's easy to track financial performance, but customer satisfaction is akin to speaking a foreign language...

Download now »
HP print solutions and 3M

Hewlett-Packard (HP)

The objective for 3M was to optimize office printing infrastructure at 3M locations worldwide, reduce total cost and environmental footprint. Some of the business benefits acheived by switching to HP print solutions...

Download now »