Title :
A Defending Mechanism against DDoS Based on Registration and Authentication
Author :
Zhang, Wei ; Guo, Shize ; Zheng, Kangfeng ; Yang, Yixian
Author_Institution :
State Key Lab. of Networking & Switching Technol., Beijing Univ. of Posts & Telecommun., Beijing
Abstract :
Because DDoS attacks destination servers from computers distributed all over network, it is very hard to locate attacking sources and resist DDoS. In this paper, a new defending mechanism based on registration and authentication against DDoS is proposed. By bidirectional warning messages, it can help locate attacking sources quickly and resist DDoS more exactly. According to the mechanism, all servers and routers applying for protecting from DDoS are required to register firstly, so that they can translate warning messages encrypted in public-key algorithm to prevent from spoofing. A flexible defending can be achieved by distributing filtering features and policies dynamically.
Keywords :
computer networks; message authentication; network servers; public key cryptography; telecommunication network routing; telecommunication security; DDoS attack defending mechanism; authentication scheme; bidirectional warning message encryption; computer network security; distributing filtering; network router; public-key cryptography algorithm; server registration scheme; spoofing attack; Authentication; Computer crime; Computer networks; Cryptography; Distributed computing; Filtering; Network servers; Protection; Public key; Resists; DDoS; authentication; protecting mechanism; registration; routing algorithm;
Conference_Titel :
Young Computer Scientists, 2008. ICYCS 2008. The 9th International Conference for
Conference_Location :
Hunan
Print_ISBN :
978-0-7695-3398-8
Electronic_ISBN :
978-0-7695-3398-8
DOI :
10.1109/ICYCS.2008.206
