In-network defense against AR-DDoS attacks
Xin Zhe Khooi, Levente Csikor, Min Suk Kang, Dinil Mon Divakaran · 2020
The prevalence of the disruptive amplified reflection DDoS (AR-DDoS) attacks is one of the biggest concerns of all network operators today. The increasing magnitude of new attacks are rendering existing measures (e.g., scrubbing services) inefficient. This work demonstrates DIDA, an efficient, topology independent, in-line AR-DDoS detection and mitigation architecture that operates entirely in the data plane.