A Service Architecture for Countering Distributed Denial of Service Attacks

We present AMP, a novel service architecture for countering distributed denial of service (dDos) attacks. AMP uses dynamically configured network components to perform traffic monitoring, filtering and detection of commonly known attacks. It does not require universal deployment and is complementary to other schemes for countering dDoS attacks, however with the use of collaborative policing techniques, the performance of the scheme can be improved greatly. In addition, it is economically viable, it can be offered as a service to the customers by service providers. We give a detailed design of our system which we implemented on our simulation test-bed. Performance evaluation of our system shows that using our scheme we were able to recover 83% of throughput lost during an attack.