Most past solutions for detecting denial of service attacks (and identifying the perpetrators) have targeted end-node victims. However, little attention has been given to this problem from an ISP perspective. This paper explores the key challenges involved in helping an ISP network detect attacks on itself or attacks on external sites which use the ISP network. This paper proposes a detection mechanism where each router detects traffic anamolies using profiles of normal traffic constructed using stream sampling algorithms. In addition, an ISP's routers exchange information with each other to increase confidence in their detection decisions.
Did you find this white paper useful?
25 out of 50 users found this white paper useful
Related white papers
ISP Nifty Offers Subscribers Online Transaction Service
Leading Japanese Internet Service Provider (ISP), Nifty delivers email, freeware/shareware, and information services to over 5 million subscribers. To maintain the member-friendly approach it has offered throughout the Internet era,...
Change Your ISP e-Mail Account Information
When the user or their Internet Service Provider (ISP) changes the e-mail account password, e-mail address, or e-mail server address, the user must change their account information in. To help...
Internet Industry - Case Study on Internet Money Makers
This presentation provides an overview of the Internet Industry.
Innovation Fuels Partner Collaboration: Digitel & Cistera Collaborate for Solution Success
Cisco channel partner, Digitel and UC enterprise application provider, Cistera, team through Cisco ISPN to deliver more valuable solutions to two customers, the city of Smyrna, GA and Opelika, AL.
Competitive Effects of Network Externalities on Interconnection Incentives of ISPs
The Internet is a classical example for a network good. Network goods not only offer utility from a so-called technology effect (resulting from the technological characteristics of the network the...
Risk Mitigation: A Strategy for Reducing Risk Through a Single-Vendor Integrated Network
With the increased reliance on the network for application support, enterprise customers are increasingly focused on the availability of the network. While there are considerations to building a diverse vendor...
Migrating Simple Data Over Cable Services to DOCSIS 1.1
The Data-Over-Cable Service Interface Specifications (DOCSIS) 1.1 standard gives cable service providers the opportunity to deploy a whole new suite of sophisticated multimedia and real-time services. Before these services can...
