Re: [LARTC] Need help please

[Emmanuel Guiton <emmanuel@netlab.hut.fi>]

Webadmin wrote:

>Hi All;
>We've been getting some DDOS attack recently, due to this I was just wondering 
>if we use some network traffic control techniques in order to reduce the risk 
>of having the DDOS attack?? is this possible after all?? can we use the 
>traffic control techniques in order to redu reduce the DDOS attack???
>
>  
>
Hi,

There ars some work in progress on this subject. I'm currently working 
on this kind of solution (I have to implement and test a new solution 
proposed by my boss).
Some related work is already available, you can read the following for 
further information: (Note that the traffic limitation part is not 
really currently addressed).

     CITRA/IDIP
 
D. Sterne, K. Djahandari, B. Wilson, B. Babson, D. Schnackenberg, H. 
Holliday, and T. Reid. (2001, September 27). "Autonomic Response to 
Distributed Denial of Service Attacks", in Proceedings of Recent 
Advances in Intrusion Detection, 4th International Symposium, pp 
134-139. Davis, California, USA. [Online]. Available: 
http://link.springer.de/link/service/series/0558/bibs/2212/22120134.htm

D. Schnackenberg, H. Holliday, R. Smith, K. Djahandari, and D. Sterne. 
(2001, June). "Cooperative intrusion Traceback and Response Architecture 
(CITRA)", in /Proceedings of the Second DARPA Information Survivability 
Conference and Exposition (DISCEX II). /Anheim, California, USA.

D. Schnackenberg, K. Djahandari, and D. Sterne. (2000, January). 
"Infrastructure for Intrusion Detection and Response", in /Proceedings 
of the DARPA Information Survivability Conference and Exposition/. 
Hilton Head, South Carolina, USA.



    ACC/Pushback

R. Mahajan, S. M. Bellovin, S. Floyd, J. Ioannidis, V. Paxson, and S. 
Shenker. (2001, July 13). "Controlling High Bandwidth Aggregates in the 
Network (Extended Version)". Draft paper pushback-Jul01.ps, work in 
progress. AT&T Center for Internet Research at ICSI (ACIRI) and AT&T 
Labs Research. [Online]. Available: http://www.icir.org/pushback.

S. Floyd, S. Bellovin, J. Ioannidis, K. Kompella, R. Mahajan, and V. 
Paxson. (2001, July). "Pushback Messages for Controlling Aggregates in 
the Network". Internet-Draft draft-floyd-pushback-messages-00.txt, work 
in progress. [Online]. Available: http://www.icir.org/pushback, 
http://www.icir.org/floyd/papers.html


Bye,
            Emmanuel

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/