Portcullis
Bryan Jeffery Parno, Dan Wendlandt, Elaine Shi, Adrian Perrig, Bruce MacDowell Maggs, Yih‐Chun Hu · 2007
Systems using capabilities to provide preferential service to selected flows have been proposed as a defense against large-scale network denial-of-service attacks. While these systems offer strong protection for established network flows, the Denial-of-Capability (DoC) attack, which prevents new capability-setup packets from reaching the destination, limits the value of these systems.