ASTVA: Traffic Validation Architecture Based on Autonomous Systems
Honghao Zhang, Guang Jin, Wei Wei, Fei Hu Zhang, Huizhan Zhang, Zhijun Xie · 2009
DoS attacks bring serious threats to the Internet and the Capabilities technique is promising to defend against DoS attacks. In this paper, we firstly make profound researches on shortcomings and inadequacies of TVA (Traffic Validation Architecture), a typical Capabilities scheme based on router. And we propose ASTVA (TVA based on Autonomous Systems), which can effectively lower the cost of security mechanisms and improve transmission efficiency without lowering the overall security. Furthermore, we adopt a new security mechanism with dynamic and adjustable security coefficient which can enhance transmission efficiency when the security requirement is not very high. Finally, we demonstrate the effectiveness and feasibilities of ASTVA by simulation experiments.