The need for a multi-perspective approach to solve the DDos problem
Jorge Hernandez-Herrero, Jon A. Solworth · Bell Labs Technical Journal · 2007
Packet flooding attacks are a major threat against the availability of networked systems in next-generation networks. The lack of authentication and authorization controls in the core layer of the Internet, the Internet Protocol (IP) layer, enables this problem. Many distributed denial of service (DDoS) defense solutions have been proposed over recent years, but no general solution is widely accepted. Multiple perspectives should be considered when architecting a DDoS solution, including (1) a technical perspective that reconciles the network and endpoint needs, (2) an interorganizational perspective that considers trust and commitments among the participating organizations, (3) a perspective ensuring incentives for the solution participants, and (4) a perspective that considers the cost of deployment. A DDoS defense architecture that considers the multiple dimensions of this problem will be more likely to be widely accepted and deployed. © 2007 Alcatel-Lucent.