A new marking scheme to defend against distributed denial of service attacks

Document Type

Conference Proceeding

Publication Date

12-1-2004

Abstract

In this paper, we propose a new mechanism to defend against Distributed Denial of Service (DDoS) attacks with path information rather than IP address information. Instead of the complete binary tree model, our proposal is based on the Four Color Theorem. The salient feature of the Theorem is that it allows color reuse so that even some portions of the map have more than 4 neighbors, 4 colors are still sufficient to mark all their borders. This idea of reuse is very important because some routers have many interfaces and the length of the ID field in the header of an IP packet, where the marking information is embedded, is very limited. Furthermore, our marking scheme takes the Internet hierarchy into account, and greatly relaxes the limitation on the number of interfaces of routers, thus making the scheme more practical. Simulation results have validated our design. © 2004 IEEE.

Identifier

18144374514 (Scopus)

Publication Title

Globecom IEEE Global Telecommunications Conference

First Page

2256

Last Page

2260

Volume

4

This document is currently not available here.

Share

COinS