| Publisher | AT&T Intellectual Property | ||
|---|---|---|---|
| Format | 287.4KB PDF | Date added | 19 Oct 2005 |
| Topics | ISPs, Network Security, Denial of Service | ||
| Downloads | 8 | ||
The last few years have seen a steady rise in the occurrence and sophistication of Distributed Denial of Service (DDoS) attacks. This paper investigates the design space for in-network DDoS detection and presents a triggered, multi-stage approach that addresses both scalability and accuracy. Each successive stage can access finer resolution data sets, and can perform deeper, more expensive diagnostics if required. They argue that this approach is applicable to any economically feasible, large scale, DDoS detection system. Their second contribution is the design and implementation of an operational instance of their triggered, multi-stage approach. The attractiveness of this system lies in the fact that it makes use of data that is readily available to an ISP. Specifically, SNMP-based anomalies trigger the collection of Netflow data for detailed attack analysis.
Did you find this white paper useful?
6 out of 10 users found this white paper useful
Related white papers
Targeted Interactive Advertising: A Killer Revenue App
As the communications industry evolves from a network-centric view of the world to a user-oriented perspective, service providers are transforming their business models to create new revenue opportunities associated with...
Dynamic and Auto Responsive Solution for Distributed Denial-of-Service Attacks Detection in ISP Network
Denial of Service (DoS) attacks and more particularly the distributed ones (DDoS) are one of the latest threat and pose a grave danger to users, organizations and infrastructures of the...
Application Security Market Trends for Service Providers: Security Approaches for Business-Critical Applications and Data in Today's Evolving Threat Landscape
The protection of the applications and data that drive business processes and transactions is critical for ensuring business availability, employee productivity, revenue loss avoidance, and brand and corporate reputation protection....
TechRepublic Web Hosting Evaluation Guide
Together TechRepublic and Web Hosting Unleashed bring you the all new Web Hosting Evaluation Guide. This download includes premier content from both sites, and is a helpful quick guide on...
Overcoming ISP Network Challenges
Organizations continue to battle problems related to delivering high-performing, continuous uptime and high-availability for applications such as VoIP, Outlook Web Access, VPN, Web Portals, and others, putting increased stress upon...
World 7th Largest Telecom Company: BSNL Banks on Cyberoam for Productive Security
BSNL has two ISP connections BSNL and AIRTEL, in its headquarters and it had Linux based proxy servers. While the Linux based proxy servers failed to do any sort of...
Traffic Matrix Reloaded: Impact of Routing Changes
A traffic matrix represents the load from each ingress point to each egress point in an IP network. Although networks are engineered to tolerate some variation in the traffic matrix,...
