Using routing and tunneling to combat DoS attacks
Adam Greenhalgh, Mark James Handley, Felipe Huici · 2005
Thorough defense against DoS attacks is extremely dif-cult without incurring signicant changes to the Internet architecture. We present a series of changes aimed at es-tablishing protection boundaries to reduce the effective-ness of most ooding DoS attacks against servers. Only minimal and local changes are required to current net-work architectures. We show that our scheme is highly benecial even if deployed at a single ISP, with addi-tional benets arising from multiple-ISP deployment. Finally, we show that the changes can be implemented with off-the-shelf components. 1