RSFB: a resilient stochastic fair blue algorithm against spoofing DDoS attacks

Authors:
Changwang Zhang;Jianping Yin;Zhiping Cai
Affiliations:
School of Computer Science, National University of Defense Technology, Changsha, Hunan, China;School of Computer Science, National University of Defense Technology, Changsha, Hunan, China;School of Computer Science, National University of Defense Technology, Changsha, Hunan, China
Venue:
ISCIT'09 Proceedings of the 9th international conference on Communications and information technologies
Year:
2009

Citing 2
Cited 0

Random early detection gateways for congestion avoidance

IEEE/ACM Transactions on Networking (TON)
Controlling High-Bandwidth Flows at the Congested Router

ICNP '01 Proceedings of the Ninth International Conference on Network Protocols

Quantified Score

Hi-index	0.00

Visualization

Abstract

The existing Active Queue Management (AQM) algorithms, including the fairness-aimed ones, are notably vulnerable to spoofing DDoS attacks. We propose a Resilient Stochastic Fair Blue (RSFB) algorithm against spoofing DDoS attacks. The basic idea behind RSFB is to record the responsive normal TCP flows and rescue their dropped packets. Simulations and analysis show that the RSFB algorithm is highly robust and can fully preserve the TCP throughput in the presence of spoofing DDoS attacks.