Securing internet by eliminating DDOS attacks

[摘要] The major threat caused to the authorised usage of Internet is Distributed Denial of Service attack. The mechanisms used to prevent the DDoS attacks are said to overcome the attack's ability in spoofing the IP packets source addresses. By utilising Internet Protocol spoofing, the attackers cause a consequential load over the networks destination for policing attack packets. To overcome the IP Spoofing level on the Internet, We propose an Inter domain Packet Filter (IPF) architecture. The proposed scheme is not based on global routing information. The packets with reliable source addresses are not rejected, the IPF frame work works in such a manner. The spoofing capability of attackers is confined by IPF, and also the filter identifies the source of an attack packet by minimal number of candidate network.

[发布机构] School of Computer Science and Engineering, VIT University, Vellore; 632014, India^1

[效力级别] 工业技术

[关键词] Attack packets;Candidate network;Distributed denial of service attack;Global routing;Inter-domain;IP spoofing;Packet filters;Source address