Rule-based Defense Mechanism against Distributed Denial-of-Service Attacks
Sung-ju Kim, Byung-chul Kim, Jae Yong Lee, Chan-kyou Hwang, Jae-jin Lee · 2008
Abstract — Since the number of damage cases resulting from distributed denial-of-service (DDoS) attacks have recently been increasing, the need for agile detection and appropriate response mechanisms against DDoS attacks has also been increasing. The latest DDoS attack has the property of swift propagation speed and various attack patterns. There is therefore a need to create a lighter mechanism to detect and respond to such new and transformed types of attacks with greater speed. This paper proposes a rule-based defense mechanism against DDoS attacks. It is expected to improve the availability, confidentiality and integrity of service by blocking the propagation of DDoS attacks earlier. Index Terms—DDoS, Rule-based Traffic Control I.