No abstract

ARP-based Distributed Denial of Service (DDoS) attacks due to ARP-storms can happen in local area networks where many computer systems are infected by worms such as Code Red or by DDoS agents. In ARP attack, the DDoS agents constantly send a barrage of ARP requests to the gateway, or to a victim computer within the same sub-network, and tie up the resource of attacked gateway or host. In this paper, we set to measure the impact of ARP-attack on resource exhaustion of computers in a local area network. Based on attack experiments, we measure the exhaustion of processing and memory resources of a victim computer and also other computers, which are located on the same network as the victim computer. Interestingly enough, it is observed that an ARP-attack not only exhausts resource of the victim computer but also significantly exhausts processing resource of other non-victim computers, which happen to be located on the same local area network as the victim computer

Network survivability is an important factor to consider in network design and analysis, but evaluation of network survivability at present mainly adopts static methods, which has certain limitations. For this purpose, the article put forward an evaluation method for network survivability under dynamic condition. That is, assuming the network nodes are intentionally attacked, we evaluate its survivability by the increase of the average hops of the network. If the increase of the average hops of a network is smaller after it suffers from intentional nodes attack, then the survivability of the network is stronger. Compared with static evaluation methods, the method proposed in the paper has more practical significance. Experimental results show that the method of paper is correct.