An Effective Priority Queue-Based Scheme to Alleviate Malicious Packet Flows from Distributed DoS Attacks
Chu‐Hsing Lin, Jung‐Chun Liu, Fuu‐Cheng Jiang, Chien-Ting Kuo · 2008
A Distributed Denial-of-Service attack affects the bandwidth or resources of a targeted system. By flooding networks and disrupting access to services, it may cause damage on multimedia network services and Internet Service Providers. In the paper, we propose to analyze the behavior of packet flows and adopt a priority queue-based algorithm that assign packets from normal users to a high priority queue and packets from suspected attackers to a low priority queue. Simulations in network simulator, NS2, prove our proposed priority queue-based scheme is effective in blocking attacking traffic while maintaining constant flows for legitimate users.