Webadmin wrote:
>Hi All;
>We've been getting some DDOS attack recently, due to this I was just
wondering
>if we use some network traffic control techniques in order to reduce the
risk
>of having the DDOS attack?? is this possible after all?? can we use the
>traffic control techniques in order to redu reduce the DDOS attack???
>
>
>
Hi,
There ars some work in progress on this subject. I'm currently working
on this kind of solution (I have to implement and test a new solution
proposed by my boss).
Some related work is already available, you can read the following for
further information: (Note that the traffic limitation part is not
really currently addressed).
CITRA/IDIP
D. Sterne, K. Djahandari, B. Wilson, B. Babson, D. Schnackenberg, H.
Holliday, and T. Reid. (2001, September 27). "Autonomic Response to
Distributed Denial of Service Attacks", in Proceedings of Recent
Advances in Intrusion Detection, 4th International Symposium, pp
134-139. Davis, California, USA. [Online]. Available:
http://link.springer.de/link/service/series/0558/bibs/2212/22120134.htm
D. Schnackenberg, H. Holliday, R. Smith, K. Djahandari, and D. Sterne.
(2001, June). "Cooperative intrusion Traceback and Response Architecture
(CITRA)", in /Proceedings of the Second DARPA Information Survivability
Conference and Exposition (DISCEX II). /Anheim, California, USA.
D. Schnackenberg, K. Djahandari, and D. Sterne. (2000, January).
"Infrastructure for Intrusion Detection and Response", in /Proceedings
of the DARPA Information Survivability Conference and Exposition/.
Hilton Head, South Carolina, USA.
ACC/Pushback
R. Mahajan, S. M. Bellovin, S. Floyd, J. Ioannidis, V. Paxson, and S.
Shenker. (2001, July 13). "Controlling High Bandwidth Aggregates in the
Network (Extended Version)". Draft paper pushback-Jul01.ps, work in
progress. AT&T Center for Internet Research at ICSI (ACIRI) and AT&T
Labs Research. [Online]. Available: http://www.icir.org/pushback.
S. Floyd, S. Bellovin, J. Ioannidis, K. Kompella, R. Mahajan, and V.
Paxson. (2001, July). "Pushback Messages for Controlling Aggregates in
the Network". Internet-Draft draft-floyd-pushback-messages-00.txt, work
in progress. [Online]. Available: http://www.icir.org/pushback,
http://www.icir.org/floyd/papers.html
Bye,
Emmanuel