TY - GEN
T1 - Proactive server roaming for mitigating Denial-of-Service attacks
AU - Khattab, Sherif M.
AU - Sangpachatanaruk, Chatree
AU - Melhem, Rami
AU - Mossé, Daniel
AU - Znati, Taieb
PY - 2003
Y1 - 2003
N2 - We propose a framework based on proactive server roaming to mitigate the effects of Denial-of-Service (DoS) attacks. The active server proactively changes its location within a pool of servers to defend against unpredictable and undetectable attacks. Only legitimate clients can follow the active server as it roams. We present algorithms that are secure, distributed, randomized, and adaptive for triggering the roaming and determining the next server to roam to. We propose some modifications to the state recovery process of existing TCP connection-migration schemes to suit roaming. Preliminary experiments in a FreeBSD network show that the overhead of server roaming is small, in terms of response time, in the absence of attacks. Further, during an attack, roaming significantly improves the response time.
AB - We propose a framework based on proactive server roaming to mitigate the effects of Denial-of-Service (DoS) attacks. The active server proactively changes its location within a pool of servers to defend against unpredictable and undetectable attacks. Only legitimate clients can follow the active server as it roams. We present algorithms that are secure, distributed, randomized, and adaptive for triggering the roaming and determining the next server to roam to. We propose some modifications to the state recovery process of existing TCP connection-migration schemes to suit roaming. Preliminary experiments in a FreeBSD network show that the overhead of server roaming is small, in terms of response time, in the absence of attacks. Further, during an attack, roaming significantly improves the response time.
KW - DoS attack mitigation
KW - Network security
UR - http://www.scopus.com/inward/record.url?scp=84893960790&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=84893960790&partnerID=8YFLogxK
U2 - 10.1109/ITRE.2003.1270623
DO - 10.1109/ITRE.2003.1270623
M3 - Conference contribution
AN - SCOPUS:84893960790
SN - 0780377249
SN - 9780780377240
T3 - Proceedings, ITRE 2003 - International Conference on Information Technology: Research and Education
SP - 286
EP - 290
BT - Proceedings, ITRE 2003 - International Conference on Information Technology
T2 - 2003 International Conference on Information Technology: Research and Education, ITRE 2003
Y2 - 11 August 2003 through 13 August 2003
ER -