Tumbler: Adaptable link access in the bots-infested Internet
METADATA ONLY
Loading...
Author / Creator
Date
2016-08
Publication Type
Journal Article
ETH Bibliography
yes
Citations
Altmetric
METADATA ONLY
Data
Rights / License
Abstract
Despite large-scale flooding attacks, capability-based defense schemes provide end hosts with guaranteed communication. However, facing the challenges of enabling scalable bandwidth fair sharing and adapting to attack strategies, none of the existing schemes adequately stand. In this paper we present Tumbler, a flooding attack defense mechanism that provides scalable competition-based bandwidth fairness at the Autonomous System (AS) granularity, and on-demand bandwidth allocation for end hosts in each AS. Tumbler enforces adaptability in the capability establishment via competition factors that are calculated upon leaf ASes' bandwidth utilization and reputation. Transit ASes independently manage each competition factor based on the corresponding feedback from dedicated bandwidth accounting and monitoring policies. Through Internet-scale simulations, we demonstrate the effectiveness of Tumbler against a variety of attack scenarios and illustrate the deployment benefits for ISPs.
Permanent link
Publication status
published
External links
Editor
Book title
Journal / series
Volume
105
Pages / Article No.
180 - 193
Publisher
Elsevier
Event
Edition / version
Methods
Geographic location
Date collected
Date created
Subject
DDoS attack; Capability scheme; Bandwidth allocation; Competition factor
Organisational unit
Notes
Received 14 April 2015, Revised 2 June 2016, Accepted 5 June 2016, Published online 7 June 2016.