RRED: robust RED algorithm to counter low-rate denial-of-service attacks

Authors:
Changwang Zhang;Jianping Yin;Zhiping Cai;Weifeng Chen
Affiliations:
School of Computer Science, National University of Defense Technology, Changsha, China;School of Computer Science, National University of Defense Technology, Changsha, China;School of Computer Science, National University of Defense Technology, Changsha, China;Department of Math & Computer Science, California University of Pennsylvania
Venue:
IEEE Communications Letters
Year:
2010

Citing 6
Cited 3

Random early detection gateways for congestion avoidance

IEEE/ACM Transactions on Networking (TON)
An adaptive virtual queue (AVQ) algorithm for active queue management

IEEE/ACM Transactions on Networking (TON)
Exploiting the Transients of Adaptation for RoQ Attacks on Internet Resources

ICNP '04 Proceedings of the 12th IEEE International Conference on Network Protocols
Low-rate TCP-targeted denial of service attacks and counter strategies

IEEE/ACM Transactions on Networking (TON)
A router-based technique to mitigate reduction of quality (RoQ) attacks

Computer Networks: The International Journal of Computer and Telecommunications Networking
Defending against flooding-based distributed denial-of-service attacks: a tutorial

IEEE Communications Magazine

Queuing algorithms performance against buffer size and attack intensities in DDOS attacks

ADCONS'11 Proceedings of the 2011 international conference on Advanced Computing, Networking and Security
Flow level detection and filtering of low-rate DDoS

Computer Networks: The International Journal of Computer and Telecommunications Networking
Chaos-based detection of LDoS attacks

Journal of Systems and Software

Quantified Score

Hi-index	0.00

Visualization

Abstract

The existing Random Early Detection (RED) algorithm and its variants are found vulnerable to emerging attacks, especially the Low-rate Denial-of-Service (LDoS) attacks. In this letter we propose a Robust RED (RRED) algorithm to improve the TCP throughput against LDoS attacks. The basic idea behind the RRED is to detect and filter out attack packets before a normal RED algorithm is applied to incoming flows. We conduct a set of simulations to evaluate the performance of the proposed RRED algorithm. The results show that, compared to existing RED-like algorithms, the RRED algorithm nearly fully preserves the TCP throughput in the presence of LDoS attacks.