Controlling malicious sources at Internet gateways

This paper describes an algorithm to control non-adaptive sources in a simple and lightweight fashion that does not maintain per-flow state information. Using experimental results from simulations, we demonstrate that the algorithm outperforms current well-known algorithms for buffer management in providing better protection for TCP flows under varying degrees of attack from non-adaptive flows.