Earticle

초록

영어

IP address spoofing is employed by a lot of DDoS attack tools. Most of the current research on DDoS attack packet filtering depends on cooperation among routers, which is hard to achieve in real campaigns. Therefore, in the paper, we propose a novel filtering scheme based on source information in this paper to defend against various source IP address spoofing. The proposed method works independently at the potential victim side, and accumulates the source information of its clients, for instance, source IP addresses, hops from the server during attacks free period. When a DDoS attack alarm is raised, we can filter out the attack packets based on the accumulated knowledge of the legitimate clients. We divide the source IP addresses into )321(≤≤nn segments in our proposed algorithm; as a result, we can therefore release the challenge storage and speed up the procedure of information retrieval. The system which is proposed by us and the experiments indicated that the proposed method works effectively and efficiently.

목차

Abstract
 1 Introduction
 2 Source-Based Filter Scheme
  2.1 Scheme Analyzing
  2.2 Scheme Implementation 
 3 System Analysis and Algorithm
  3.1 Memory Requirement
  3.2 Filter Efficiency
  3.3 Adaptive Analysis
 4 Performance Evaluations and Algorithms
  4.1  Performance Evaluations 
  4.2  Filter Algorithms
 5 Conclusions and Future Work
 References

키워드

저자

• Fasheng Yi [ School of Engineering and Information Technology Deakin University, Department of Network Security, University of Electronic Science and Technology of China ]
• Shui Yu [ School of Engineering and Information Technology Deakin University ]
• Wanlei Zhou [ School of Engineering and Information Technology Deakin University ]
• Jing Hai [ School of Engineering and Information Technology Deakin University ]
• Alessio Bonti [ School of Engineering and Information Technology Deakin University ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Database Theory and Application

• 간기

  격월간

• pISSN

  2005-4270

• 수록기간

  2008~2016

• 십진분류

  KDC 505 DDC 605