Cookie-based amplification repression protocol
Jing Zheng, Jianhua Sun, Kun Sun, Bo Wu, Qi Lecky Li · 2017
In this paper, we propose a Cookie-based Amplification Repression Protocol (CARP) to address the increasing threat of amplification attack. As a replacement of UDP protocol, CARP outperforms previous works in three aspects: i) CARP is a generic solution for all UDP-based amplification attacks regardless of the application protocols; ii) CARP incurs low-latency and introduces no additional latency in most use cases which is suitable for all UDP-based application scenario; iii) CARP supports incremental deployment and plug-and-play. Its interest-driven deployment model makes it much easier to be adopted. We implement a prototype of CARP and evaluate its performance on different metrics. Our results show that CARP is a lightweight and efficient solution for mitigating amplification attack.