Using an identity-based dynamic access control filter (IDF) to defend against DoS attacks

A denial of service (DoS) attack is a well-known problem for networks. Although many research papers have addressed the problem of DoS attacks, some drawbacks still exit. The major problem is this: when a responder receives a request or key message, and system resources are required to verify that the request has been sent from a legitimate user, the additional computing time and memory storage involved provides an adversary the opportunity to launch a DoS attack. In order to prevent this attack, we present a new protocol called the identity-based dynamic access control filter (IDF), which checks every filter value on every received frame to determine if they have permission to enter the system and use system resources. In this paper we focus on wireless network protection, but the same concept can be applied to a wired network as well. A performance analysis of the critical step used in preventing a DoS attack is conducted and the result is compared with other public key-based schemes.