A Taxonomy of Criteria for Evaluating Defence Mechanisms against Flooding DoS Attacks

Abstract

Abstract. This paper describes a set of criteria for evaluating defence mechanisms against flooding denial of service (DoS) attacks. Effectiveness and usefulness of a defence mechanism in mitigating a DoS attack depends on many issues which are presented here in the form of a taxonomy. The primary goal of this taxonomy is to help in getting a comprehensive view on both the strengths and weaknesses of a specific defence mechanism. A good defence mechanism should not disturb legitimate traffic when there is no attack, should mitigate the amount of attack traffic well enough, should increase the quality of service (QoS) available to legitimate traffic during an attack, and should use as little resources in this task as possible. In addition, any defence mechanism should be robust against changes in attack characteristics and intentional misuse.

Game-Theoretical Effectiveness Evaluation of DDoS Defense

“…The compare and taxonomy research work is needed in the defense mechanisms field. [7] proposes a taxonomy mechanism for evaluation criteria in DDoS defense strategies. It generalizes evaluation criteria, but it dose not include concrete compare applications.…”

Computer Security: a Survey of Methods and Systems

“…However, adaptation of novel approaches is only possible if they can be thoroughly evaluated and appropriate recommendations made with regard to their use. Molsa describes taxonomy of criteria for evaluating defense mechanisms against denial of service attacks [75] . Criteria such as effectiveness during normal activity and attack, ability to fulfill requirements on application quality of service, robustness against misuse, resilience against changes in attack characteristics, configuration capabilities, and interoperability are considered.…”