A new mechanism for improving robustness of TCP against pulsing denial-of-service attacks
Hiroshi Tsunoda, Kenjirou Arai, Nei Kato, Yoshiaki Nemoto · 2006
Abstract: In this paper, we propose a new mechanism to combat pulsing Denial-of-Service (DoS) at-tacks. Pulsing DoS attacks can seriously degrade the throughput of legitimate TCP flows in a stealthy manner. The attacker send periodic short bursts of traffic (i.e. pulses) to cause packet losses of TCP flows. For improving robustness of TCP against the attacks, we propose to use adaptive bandwidth estimation mechanism in TCP congestion control process. The performance of the proposed method is evaluated through simulations, and is compared with the other TCP variants. From the simulation results, we verified that the proposed method can effectively mitigate the effect of pulsing DoS attacks.