AEGIS: An Active-Network-Powered Defense Mechanism against DDoS Attacks

  • Authors:
  • Eric Y. Chen

  • Affiliations:
  • -

  • Venue:
  • IWAN '01 Proceedings of the IFIP-TC6 Third International Working Conference on Active Networks
  • Year:
  • 2001

Quantified Score

Hi-index 0.00

Visualization

Abstract

Distributed Denial of Service (DDoS) attacks are a pressing problem on the Internet as demonstrated by recent attacks on major e-commerce servers and ISPs. Since their threat lies in the inherited weaknesses of the TCP/IP, an effective solution to DDoS attacks must be formulated in conjunction with a new networking paradigm, such as Active Networks. In this paper, we introduce a conceptual framework called Aegis, which we propose as a defense mechanism against DDoS attacks. The core-enabling technology of this framework is the Active Network, which incorporates programmability into intermediate network nodes and allows end-users to customize the way network nodes handle data traffic. By introducing Aegis, we also wish to demonstrate some of the new possibilities that the Active Networks can offer.