Mitigating Flooding-Based DDoS Attacks by Stochastic Fairness Queueing
Yu Ming - · INTERNATIONAL JOURNAL ON Advances in Information Sciences and Service Sciences · 2012
Flooding-based DDoS attacks is a very common way to attack a victim machine by directly or indirectly sending a large amount of malicious traffic to it. Stochastic Fairness Queueing (SFQ) is a typical implementation of Fair Queueing. This paper focuses on exploring the feasibility of mitigating flooding-based DDoS attacks by queueing disciplines. A comparative study is made between SFQ and FCFS (First Come First Served) on their efficacy and robustness in mitigating UDP flooding, a typical flooding-based DDoS attack. Simulation results based on Network Simulator 2 show FCFS has little effect on mitigating UDP flooding while SFQ is more effective and more robust.