Mitigating DDoS Attacks using Combined Input-Crosspoint Buffered Switches
Chuan-Bi Lin, Yun-Cheng Chang, Ziqian Dong · 2011
Distributed Denial of Service (DDoS) attack is a major threat to Internet services. We propose a scheduling scheme in a combined input-crosspoint buffered switch to mitigate the DDoS attacks in this paper. The proposed scheduling scheme allows legitimate traffic to pass with high priority and suspected attack traffic to pass however with low priority. By controls the service priority of suspected attack traffic, the method can reduce the damage DDoS attack has on the targeted end hosts.