Coordinator-Agent Based Distributed Defense against DDoS Attacks in Transit-Stub Networks
Karanbir Singh, Kanwalvir Singh Dhindsa, Bharat Bhushan · International Journal of Future Generation Communication and Networking · 2017
A distributed denial of service (DDoS) attack can disrupt the normal functioning of Internet services of any organization.There exist many defense systems developed in the past, but they suffer from some disadvantages.Here, we proposed a distributed defense mechanism which detects and mitigate DDoS attacks by monitoring traffic on the edge routers of stub networks.The defense mechanism can be deployed in the form of agents and coordinator on the edge and gateway routers.The entropy based detection will monitor the traffic passing through edge routers and identify if any suspicious flow exists or not.The identified suspicious flow is further inspected to confirm whether it belongs to the legitimate flow or attack flow.The attack related information extracted from the attack packets is then passed to the coordinator.The coordinator shares this information with the neighboring coordinators so that they can instruct their agents to monitor and rate limit the traffic.The effectiveness of the defense system can be measured using some performance metrics through experiments.