DDoS tolerant networks

Abstract

The nature of the threats posed by Distributed Denial of Service (DDoS) attacks on large networks, such as the Internet, demands effective detection and response methods. These methods must be deployed not only at the edge but also at the core of the network. The DDoS Tolerant Networks technology incorporates methods to detect, characterize, and respond to DDoS attacks by computing entropy and frequency-sorted distributions of selected packet attributes. Preliminary results indicate that these methods can be effective against current attacks and suggest directions for improving detection of more stealthy attacks.

Model of Network Traffic Based on Network Applications and Network Users

“…These findings are in sharp contrast to classical traffic models such as Markov or homogeneous Poisson. LRD and non-Gaussian can lead to much higher packet losses than predicted by classical Markov/Poisson queuing analyses [1], [3] . Multi-fractal [4][7] [9] ,Data cascade [5] [11] and Wavelet [6] [10] were also used to describe the behavior of Network.…”