A novel traffic control architecture against global-scale network attacks in highspeed internet backbone networks

Authors:
Byeong-hee Roh;Wonjoon Choi;Myungchul Yoon;Seung W. Yoo
Affiliations:
Graduate School of Information and Communication, Ajou University, Suwon, Korea;Graduate School of Information and Communication, Ajou University, Suwon, Korea;Mobile Extend Inc., Seoul, Korea;Graduate School of Information and Communication, Ajou University, Suwon, Korea
Venue:
ICOIN'05 Proceedings of the 2005 international conference on Information Networking: convergence in broadband and mobile networking
Year:
2005

Citing 5
Cited 0

Queue response to input correlation functions: discrete spectral analysis

IEEE/ACM Transactions on Networking (TON)
On the self-similar nature of Ethernet traffic (extended version)

IEEE/ACM Transactions on Networking (TON)
Fast, approximate synthesis of fractional Gaussian noise for generating self-similar network traffic

ACM SIGCOMM Computer Communication Review
Defending against flooding-based distributed denial-of-service attacks: a tutorial

IEEE Communications Magazine
Internet infrastructure security: a taxonomy

IEEE Network: The Magazine of Global Internetworking

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper, we propose a global traffic control architecture to isolate network attacks from normal traffic in the backbone networks designed to serve normal traffic only. Unlike existing methods based on individual packets or flows, the proposed traffic control methods are operated on the aggregate traffic level, so the computational complexity can be significantly reduced, and they are applicable to develop a global defense architecture against attacks to network infra-structure. Experimental results show that the proposed scheme can detect the network attack symptoms very exactly and quickly, and protect the network resources as well as the normal traffic flows very efficiently.