Stochastic Security Performance of Active Cache Based Defense against DoS Attacks in Wireless Mesh Network
Yan Ye, Jiannong Cao, Li Zhu · 2009
Due to its wireless multi-hop feature, wireless mesh network (WMN)is prone to suffer from many attacks, such as denial of service attack(DoS). In the DoS attack, when extortionate high-load flows flood to individual mesh routers (MR), they can no longer provide normal services to innocent flows. An active cache based defense solution can detect the existence of attacking flows based on the frequency of incoming packets and eliminate the attacking flows by discarding packets by a drop probability(DP). As shown in our simulation study, the selection and variance of DP have a significant impact on the performance of the defense solution to both attacking flows and innocent flows. In this paper, a series of DP selection and variance methods are employed in our simulation studies. From them, we can optimize the DP methods and corresponding parameter setting of the solution against Dos attack by the analysis on the simulation results.