Title
Mitigating network denial-of-service through diversity-based traffic management
Abstract
In this paper we explore the feasibility of mitigating network denial-of-service (NDoS) attacks (attacks that consume network bandwidth) by dynamically regulating learned classes of network traffic. Our classification technique clusters packets based on the similarity of their contents – both headers and payloads – using a variation of n-grams which we call (p,n)-grams. We then allocate shares of bandwidth to each of these clusters using an adaptive traffic management technique. Our design intent is that excessive bandwidth consumers (e.g. UDP worms, flash crowds) are segregated so that they cannot consume bandwidth to the exclusion of other network traffic. Because this strategy, under congestion conditions, increases the packet drop rate experienced by sets of similar flows and thus reduces the relative drop rate of other, dissimilar flows, we characterize this strategy as diversity-based traffic management. We explain the approach at a high level and report on preliminary results that indicate that network traffic can be quickly and concisely learned, and that this classification can be used to regulate the bandwidth allocated to both constant packet and polymorphic flash UDP worms.
Year
DOI
Venue
2005
10.1007/11496137_8
ACNS
Keywords
Field
DocType
constant packet,flash crowd,classification technique clusters packet,network bandwidth,diversity-based traffic management,network traffic,adaptive traffic management technique,mitigating network denial-of-service,excessive bandwidth consumer,udp worm,traffic shaping,polymorphism,network security,denial of service,traffic management
Traffic generation model,Computer security,Computer science,Network security,Network packet,Computer network,Dynamic bandwidth allocation,Traffic shaping,Packet switching,Network traffic control,Bandwidth management,Distributed computing
Conference
Volume
ISSN
ISBN
3531
0302-9743
3-540-26223-7
Citations 
PageRank 
References 
12
0.80
19
Authors
3
Name
Order
Citations
PageRank
Ashraf Matrawy114626.98
P. C. van Oorschot24230414.39
Anil Somayaji31842217.22