R. Biswas, J. Wu and A. Srinivasan, “Cost-Aware Optimal Filter Assignment Policy Against Distributed Denial-of-Service Attack,” 2019 Resilience Week (RWS), San Antonio, TX, USA, 2019, pp. 57-63, doi: 10.1109/RWS47064.2019.8972008.

Cost-Aware Optimal Filter Assignment Policy Against Distributed Denial-of-Service Attack

Download PDF   IEEEexplore Link



In a denial-of-service (DoS) attack, the attacker sends out a huge number of requests to exhaust the capacity of a server. The victim cannot serve incoming requests and then DoS occurs. When the attacker stops sending requests, the victim gets back to working state. The most devastating distributed DoS attack is performed by bots, malicious programs that reside on the affected user computers. By using a special type of router called filter router (FR), the victim can protect itself. A server needs to send filters to FR for blocking attack traffic. A filter blocks both attack and user traffic which are destined for the victim at the FR. The victim needs to select a subset of FRs wisely to minimize the blockage of users. The victim’s operation is not hampered if the total incoming traffic does not exceed its capacity. In this paper, we formulate a problem for selecting FRs given a budget on the number of filters. The problem considers that the victim has limited incoming bandwidth and we provide an optimal dynamic programming solution. We conduct extensive simulation in different settings. Our simulation results strengthen support for our solutions.
Date of Conference: 4-7 Nov. 2019
Date Added to IEEE Xplore30 January 2020
ISBN Information:
INSPEC Accession Number: 19303461
Publisher: IEEE
Conference Location: San Antonio, TX, USA, USA

Leave a Comment

Your email address will not be published. Required fields are marked *