Small DDoS defense system using routing deployment method
Ho-Seok Kang, Sung‐Ryul Kim · World Congress on Internet Security · 2012
The defense systems for DDoS(Distributed Denial of Service) attacks are getting more advanced. Where to place the system is a key issue. Shield[1] brings up deployment problem and is made with traffic trapping and traffic black-holing techniques. In this paper, a framework for redirection and filtering that works within an AS(Autonomous System) is proposed, while the Shield works outside an AS. This system allows precise traffic redirection and detection using routing update of RIP, a widely-used IGP(Interior Gateway Protocol). We describe our system using the five DDoS attack scenarios and three-phase modes of operation within an AS.