Title :
DDoS Defense Using TCP_IP Header Analysis and Proactive Tests
Author :
Ye, Zhen ; Shi, Weiwei ; Ye, Dayong
Author_Institution :
Sch. of Comput. & Inf., Hefei Univ. of Technol., Hefei, China
Abstract :
To defend against distributed denial of service (DDoS) attacks, one critical issue is to effectively isolate the attack traffic from the normal ones. A novel DDoS defense scheme based on TCP_IP Header Analysis and Proactive Tests (THAPT) is hereby proposed. Unlike most of the previous DDoS defense schemes that are passive in nature, the proposal uses proactive tests to identify and isolate the malicious traffic. Simulation results validate the effectiveness of our proposed scheme.
Keywords :
security of data; transport protocols; DDoS attacks; DDoS defense; TCP_IP header analysis; attack traffic; distributed denial of service; malicious traffic; proactive tests; Computer crime; Computer science; Information analysis; Information filtering; Information filters; Information technology; Internet; Telecommunication traffic; Testing; Traffic control; DDoS defense; TCP_IP header; proactive test;
Conference_Titel :
Information Technology and Computer Science, 2009. ITCS 2009. International Conference on
Conference_Location :
Kiev
Print_ISBN :
978-0-7695-3688-0
DOI :
10.1109/ITCS.2009.248
