Automatic Selection of Routers for Placing Early Filters of Malicious Traffic

Botnets have become the top threat to Internet security. Botnets generate and transmit huge amounts of malicious traffic for various purposes. In this paper, we propose a dynamic programming based algorithm to calculate a set of appropriate routers for placing early filters of malicious traffic in the network in order to maximize the benefits of early malicious traffic filtering. Moreover, we discuss how to combine our early filtering approach and the QoS routing of traffic so that the bandwidth saved by early filtering of malicious traffic can be efficiently utilized by legitimate traffic.