DDoS mitigation based on token bucket arrays
Xing Li · Journal of Tsinghua University(Science and Technology) · 2011
A classification scheme based on the random decomposition of Poisson processes was introduced to reduce filter complexity while maintaining accuracy when filtering distributed denial of service(DDoS) packets.The traffic was decomposed into sub-flows based on the packet features,with packets in each sub-flow randomly discriminated based on the intensity ratio for two classes in the sub-flow.A practical system based on the token bucket array(TBA) was developed which increased the performance by removing real-time parameter estimation of the attacking traffic.The error probability is proven to be less than twice that of the maximum a posteriori(MAP) criterion and decreases when confronting burst attacking traffic.Tests demonstrate the effectiveness of the system especially for filtering burst DDoS traffic.