Improving Distributed Denial of Service (DDOS) Attack Detection Performance using Priority Queuing

Distributed Denial of Service (DDoS) attacks are a major threat for the deployment of SIP-based VoIP networks. Various solutions have been suggested to mitigate the impact of these attacks, each bringing its advantages and disadvantages. Classifying the SIP-based VoIP traffic into different queues according to the suspiciousness of the traffic, can be an efficient solution if it is correctly implemented. Unfortu-nately, adding queues to the SIP servers affects severely its performance. The current paper suggests a mechanism called “virtual queuing” that implements a priority queue on a SIP server while keeping its performance at its best