A cross-layer approach for mitigating denial of service attacks: device-driver packet filter and remote firewalling. | [International Journal of Communication Networks and Information Security • 2010]

Author(s):

1. Joshua B. Wade: Department of Computer Science, Southern Illinois University Edwardsville, EdwardsvilleIllinois, USA

2. Hiroshi Fujinoki: Department of Computer Science, Southern Illinois University Edwardsville, EdwardsvilleIllinois, USA

3. Adam Coffman: Department of Computer Science, Southern Illinois University Edwardsville, EdwardsvilleIllinois, USA

4. Delia M. Feerer: Department of Computer Science, Southern Illinois University Edwardsville, EdwardsvilleIllinois, USA

5. Andrew G. Hauck: Department of Computer Science, Southern Illinois University Edwardsville, EdwardsvilleIllinois, USA

Abstract:

This paper presents two methods to mitigate distributed denial of service attacks and flash crowds: device driver level packet filtering and remote firewall. Device driver level packet filtering is designed to eliminate harmful network traffic before it consumes the processing resource for higher network protocol layers at a production server. The remote firewall is designed with a cross-layer control to protect access links from DDoS attacks by dropping potentially harmful network traffic before they get into the link. A proof-ofconcept model for the remote firewall was developed to demonstrate its feasibility. Our performance study showed that the device driver level filtering processed approximately 2.5 times more packets than the IP level filtering at 200,000 packets per second while 75% of the traffic was attacking packets. This demonstrated that executing packet filtering at the device driver would be effective under intense DDoS attacks and heavy flash crowds.

Page(s): 231-239

DOI: DOI not available

Published: Journal: International Journal of Communication Networks and Information Security, Volume: 3, Issue: 2, Year: 2010

Keywords:

Keywords are not available for this article.

References:

References are not available for this document.

Citations

Citations are not available for this document.

Citations

Downloads

Views