Mitigating Distributed Denial of Service Attacks with Dynamic Resource Pricing

Mankins, David; Krishnan, Rajesh; Boyd, Ceilyn; Zao, John K.; Frentz, Michael

doi:10.21236/ada406438

Cited by 22 publications

(10 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Therefore, we decided to include an additional step in the FSM setup phase, in which all participants (including the owner) are required to pay an additional small service pawn that will be returned only at activation time. It has been proven that the introduction of a small fee to access a service can mitigate many DOS attacks [32,36].…”

Section: Dos and Deadlock Preventionmentioning

confidence: 99%

I Told You Tomorrow: Practical Time-Locked Secrets using Smart Contracts

Bacis

Facchinetti

Guarnieri

et al. 2021

Proceedings of the 16th International Conference on Availability, Reliability and Security

View full text Add to dashboard Cite

A Time-Lock enables the release of a secret at a future point in time. Many approaches implement Time-Locks as cryptographic puzzles, binding the recovery of the secret to the solution of the puzzle. Since the time required to find the puzzle's solution may vary due to a multitude of factors, including the computational effort spent, these solutions may not suit all scenarios.To overcome this limitation, we propose I Told You Tomorrow (ITYT), a novel way of implementing time-locked secrets based on smart contracts. ITYT relies on the blockchain to measure the elapse of time, and it combines threshold cryptography with economic incentives and penalties to replace cryptographic puzzles.We implement a prototype of ITYT on top of the Ethereum blockchain. The prototype leverages secure Multi-Party Computation to avoid any single point of trust. We also analyze resiliency to attacks with the help of economic game theory, in the context of rational adversaries. The experiments demonstrate the low cost and limited resource consumption associated with our approach. CCS CONCEPTS• Security and privacy → Security services.

show abstract

Section: Dos and Deadlock Preventionmentioning

confidence: 99%

I Told You Tomorrow: Practical Time-Locked Secrets using Smart Contracts

Bacis

Facchinetti

Guarnieri

et al. 2021

Proceedings of the 16th International Conference on Availability, Reliability and Security

View full text Add to dashboard Cite

show abstract

“…A challenging aspect of these proposals is the lack of a theoretically-backed method to tune the puzzle difficulty. To address this issue, Mankins et al [95] propose a pricing mechanism to set the difficulty based on the service-request type; however, the pricing functions are set by the server a priori, and may fail as the incentives or capabilities of the attacker change over time. A dynamic strategy to determine puzzle difficulty is given by Wang and Reiter [142].…”

Section: Application-layer Ddos Attacksmentioning

confidence: 99%

Resource Burning for Permissionless Systems (Invited Paper)

Gupta

Saia

Young

2020

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Proof-of-work puzzles and CAPTCHAS consume enormous amounts of energy and time. These techniques are examples of resource burning: verifiable consumption of resources solely to convey information.Can these costs be eliminated? It seems unlikely since resource burning shares similarities with "money burning" and "costly signaling", which are foundational to game theory, biology, and economics. Can these costs be reduced? Yes, research shows we can significantly lower the asymptotic costs of resource burning in many different settings.In this paper, we survey the literature on resource burning; take positions based on predictions of how the tool is likely to evolve; and propose several open problems targeted at the theoretical distributed-computing research community.

show abstract

“…Dynamic Resource Pricing: Mankins et al [36] discuss the applicability of dynamic They propose a distributed gateway framework and a payment protocol. The idea is to impose dynamically changing prices on both network servers and information resources so that the approach can push the cost of initiating service requests, in terms of monetary payments and/or computational burdens, to requesting clients.…”

Section: Mitigation Approachesmentioning

confidence: 99%

DDoS Attacks: Tools, Mitigation Approaches, and Probable Impact on Private Cloud Environment

Deka¹,

Bhattacharyya²,

Kalita³

2017

Preprint

View full text Add to dashboard Cite

The future of the Internet is predicted to be on the cloud, resulting in more complex and more intensive computing, but possibly also a more insecure digital world. The presence of a large amount of resources organized densely is a key factor in attracting DDoS attacks. Such attacks are arguably more dangerous in private individual clouds with limited resources. This paper discusses several prominent approaches introduced to counter DDoS attacks in private clouds. We also discuss issues and challenges to mitigate DDoS attacks in private clouds.

show abstract

Mitigating Distributed Denial of Service Attacks with Dynamic Resource Pricing

Abstract: Distributed Denial of Service (DDoS)

Cited by 22 publications

References 2 publications

I Told You Tomorrow: Practical Time-Locked Secrets using Smart Contracts

I Told You Tomorrow: Practical Time-Locked Secrets using Smart Contracts

Resource Burning for Permissionless Systems (Invited Paper)

DDoS Attacks: Tools, Mitigation Approaches, and Probable Impact on Private Cloud Environment

Contact Info

Product

Resources

About