TrustGuard: A flow-level reputation-based DDoS defense system

Abstract

Distributed Denial of Service (DDoS) attacks pose one of the most serious security threats to the Internet. We examine the drawbacks of existing defense schemes. To combat these deficiencies, we propose a credit-based defense system: TrustGuard. Essentially, flows accumulate credit based on the diversity of their packet-size distribution. The more diverse… (More)

Topics

7 Figures and Tables

Slides referencing similar topics