Defense of Massive Anomalous Traffic Attack
Liu Dongxin · ZTE Technology Journal · 2015
In this paper, we propose a solution for ISPs to deal with massively anomalous traffic. This solution includes short-term protection and a long-term strategy. The short-term protection is mainly based on the existing abnormal flow detection but enhances the protection capabilities. The long-term strategy aims to improve the IP source address spoofing filtering and the protocols of the open service, such as DNS and NTP. With the decrease of the available known resource for attackers, new application protocols are used to make areflected and amplified anomalous traffic. For the sustained improvement of attacker skills, the defense of massively anomalous traffic need to be continuously tested and improved in practice.