Reconfigurable bandwidth controller for responding the DDoS attacks using token bucket mechanism
Sang-Kil Park, Jintae Oh, Ki-Young Kim, Jongsoo Jang · 2005
Nowadays BcN is researched and developed for supporting the service e-commerce, telecommunication and ubiquitous computing. Internet gives us the benefit of remote access to the information but causes the attacks that can break the server and modify the information. Since 2000 Nimda, code red virus and DDoS attacks are actuated in Internet. This attack programs makes tremendously traffic packet on the Internet. In this paper, we designed and developed the bandwidth controller and packet response coordinator which makes decision and transmit or drop the packet in the gateway systems for the bandwidth consuming attack. This bandwidth controller is implemented in hardware chipset (FPGA) Virtex II Pro which is produced by Xilinx and act as a policing function. We referenced the TBF (token bucket filter) in Linux Kernel 2.4 and implemented this function in HDL (hardware description language) Verilog. This HDL code is synthesized in hardware chipset and performs the Gigabit traffic in real time. This policing function can throttle the traffic as the bandwidth controlling bps speed