Abstract

Volumetric distributed denial-of-service (DDoS) attacks can bring any network to a halt. Because of their distributed nature and high volume, the victim often cannot handle these attacks alone and needs help from upstream ISPs. Today's Internet has no automated mechanism for victims to ask ISPs for help in attack handling and ISPs themselves do not offer such services. We propose SENSS, a security service for collaborative mitigation of volumetric DDoS attacks. SENSS enables the victim of an attack to request attack monitoring and filtering on demand, and to pay for the services rendered. Requests can be sent both to the immediate and to remote ISPs, in an automated and secure manner, and can be authenticated by these ISPs, without having prior trust with the victim. Simple and generic SENSS APIs enable victims to build custom detection and mitigation approaches against a variety of DDoS attacks …

Metadata

publication

Proceedings of the 34th Annual Computer Security Applications Conference …, 2018

year

2018

publication date

2018/12/3

authors

Sivaramakrishnan Ramanathan, Jelena Mirkovic, Minlan Yu, Ying Zhang

link

https://dl.acm.org/doi/abs/10.1145/3274694.3274717

resource_link

https://steel.isi.edu/members/sivaram/papers/senss.pdf

book

Proceedings of the 34th Annual Computer Security Applications Conference

pages

266-277