Global Traffic Control Architecture for Flash Crowd and Dos Attacks in Internet Backbone Networks
Global Traffic Control Architecture for Flash Crowd and Dos Attacks in Internet Backbone Networks
- 주제(키워드) DDOS , Flash Crowd , Global Traffic Control
- 발행기관 아주대학교
- 지도교수 Roh Byeong-Hee
- 발행년도 2006
- 학위수여년월 2006. 8
- 학위명 석사
- 학과 및 전공 정보통신전문대학원 정보통신공학과
- 본문언어 한국어
초록/요약
Flash crowd and malicious traffic including DoS and worm attacks present a real threat to the stability of internet networks. In this thesis we study the properties of both types of events with a special attention to characteristics that distinguish the flash crowd traffic from the attack traffic. In a result we proposed a mechanism to isolate the flash crowd traffic form DoS attack flowed in the Internet backbone. The proposed mechanism works with the global traffic control architecture which isolates network attacks from normal traffic in the backbone networks. In the global detection of the proposed mechanism IP-flow level detection is performed to distinguish the flash crowd traffic from DoS attack, later alert messages are generated and forwarded to the edge routers along with relative frequencies. Simulation result shows that the proposed mechanism is effective and it also increases the performance of the global traffic control architecture.
more목차
Contents
1. Introduction ------------------------------------------------------------------------------1
1.1 Internet Infrastructure security --------------------------------------------------1
1.2 Traffic characterization ----------------------------------------------------------2
2 Background ------------------------------------------------------------------------------- 3
2.1 Denial of service ------------------------------------------------------------------3
2.2 DoS Attacks -----------------------------------------------------------------------4
2.3 Dos Defense -----------------------------------------------------------------------5
2.4 Flash crowd ----------------------------------------------------------------------10
3 Proposed Method for Filtering Flash Crowd from DoS Attacks -----------------12
3.1 Motivation -----------------------------------------------------------------------12
3.2 Global Defense Architecture --------------------------------------------------12
3.2.1 Detection Mechanism -------------------------------------------------------12
3.2.2 Defense Architecture --------------------------------------------------------13
3.3 Flash Crowd Filtering Mechanism -------------------------------------------14
4 Performance Evaluation -------------------------------------------------------------20
5 Conclusion ----------------------------------------------------------------------------26
6 Reference ------------------------------------------------------------------------------27
