A Cross-Layer Approach for Mitigating Denial of Service Attacks: Device-Driver Packet Filter and Remote Firewalling
Joshua B. Wade, Hiroshi Fujinoki, Adam Coffman, Delia M. Feerer, Andrew G. Hauck · International Journal of Computer Network and Information Security · 2010
This paper presents two methods to mitigate distributed denial of service attacks and flash cro wds: device driver level packet filtering and remote firewall. Device driver level packet filtering is designed to eliminate har mful network traffic before it consumes the processing resource for higher network protocol layers at a production server. Th e remote firewall is designed with a cross-layer control to protect access links from DDoS attacks by dropping potentially har mful network traffic before they get into the link. A p roof-of- concept model for the remote firewall was developed to demonstrate its feasibility. Our performance study showed that the device driver level filtering processed approxi mately 2.5 times more packets than the IP level filtering at 2 00,000 packets per second while 75% of the traffic was att acking packets. This demonstrated that executing packet f iltering at the device driver would be effective under intense DDoS attacks and heavy flash crowds.