Shield: DoS filtering using traffic deflecting Conference

Kline, E, Afanasyev, A, Reiher, P. (2011). Shield: DoS filtering using traffic deflecting . 2014 IEEE 22ND INTERNATIONAL CONFERENCE ON NETWORK PROTOCOLS (ICNP), 37-42. 10.1109/ICNP.2011.6089077

cited authors

  • Kline, E; Afanasyev, A; Reiher, P

authors

abstract

  • Denial-of-service (DoS) attacks continue to be a major problem on the Internet. While many defense mechanisms have been created, they all have significant deployment issues. This paper introduces a novel method that overcomes these issues, allowing a small number of deployed DoS defenses to act as secure on-demand shields for any node on the Internet. The proposed method is based on rerouting any packet addressed to a protected autonomous system (AS) through an intermediate filtering node - a shield. In this way, all potentially harmful traffic could be discarded before reaching the destination. The mechanisms for packet rerouting use existing routing techniques and do not require any kind of modification to the deployed protocols or routers. To make the proposed system feasible, from both deployment and usage points of view, traffic rerouting and outsourced filtering could be provided as an insurance-style on-demand service. © 2011 IEEE.

publication date

  • December 26, 2011

published in

Digital Object Identifier (DOI)

start page

  • 37

end page

  • 42