Comparative Analysis of Two PacketScore Schemes
Shu Guang · Communications technology · 2009
Distributed denial-of-service attack poses a significant threat to the Internet.Packet Score is thus proposed as a proactive distributed denial-of-service defense scheme,which could differentiates attacking packets from good ones by their scores.This paper describes Conditional-Legitimate-Probability based and Leaky-Bucket based Packet Score schemes,and these two schemes are compared in choices of packet number and packet attribute during each detection period.Simulations indicate that the Leaky-Bucket based Packet Score scheme has even higher processing speed and is easy in hardware implementation in the situation that the recognition rate of attacking packet is slightly low.