Protection system against overload and distributed denial of service attacks

  • Authors:
  • Ervin Toth;Zoltan Hornak;Gergely Toth

  • Affiliations:
  • Security Evaluation Analysis and Research Laboratory, SEARCH-LAB, 1 Infopark, stny., 1117 Budapest, Hungary.;Security Evaluation Analysis and Research Laboratory, SEARCH-LAB, 1 Infopark, stny., 1117 Budapest, Hungary.;Security Evaluation Analysis and Research Laboratory, SEARCH-LAB, 1 Infopark, stny., 1117 Budapest, Hungary.

  • Venue:
  • International Journal of Critical Computer-Based Systems
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

Detection of overload and protection from denial of service attacks is a common problem in information system servers. Such situation may be the result of simple overload, such as increased service request rate during peak hours, or a malicious distributed attack originating from many computers. This article describes a solution to this problem, focusing on protection mechanisms against both natural and malicious overload, based on analysing the queue of requests – which, as described in this paper, is chosen to be unlimited. Furthermore, detection and protection scheme against blocking and crash-bug exploiting attacks is presented.