Scheme to Prevent Denial of Service Attacks on UPnP

Denial of service (DoS) attack can be easily launched for the simple service discovery Protocol (SSDP) on Universal Plug and Play (UPnP). This paper proposes a novel DoS defense scheme on UPnP. The connection between UPnP devices and attack nodes will be limited, and the useless descriptions received by the UPnP control points will be filtered through setting packet-filter with traffic anomaly detection on the active nodes and rule-based XML firewall on the UPnP control points. Finally, the paper analyzes the performance of this scheme, which shows its particular advantages.