Controlling High Bandwidth Aggregates under DDoS
Wang Zhong-li · Computer Technology and Development · 2008
In DDoS attacks,the congestion is neither due to a single flow,nor due to a general increase in traffic,but to a well-defined subset of the traffic-an aggregate.Based on the point,study the prevention mechanism of DDoS from the aspect of congestion control.DDoS and normal traffic are separted in the process of clustering.High-bandwidth traffic which causes congestion are controlled efficiently.DDoS can't use the bandwidth of normal traffic.Therefore,the victim of network bandwidth are protected commendably.Finally,confirm the validity of algorithm in the simulation.It has great reference value for a better understanding of DDoS attacks and defense.