Abstract

Currently, there is no effective defense against large-scale distributed denial-of-service (DDoS) attacks. While numerous DDoS defense systems exist that offer excellent protection from specific attack types and scenarios, they can frequently be defeated by an attacker aware of their weaknesses. A necessary requirement for successful DDoS defense is wide deployment, but none of these systems can guarantee wide deployment simply because deployment depends more on market and social aspects than on the technical performance of the system.To successfully handle the DDoS threat we must abandon the current paradigm---the design of defense systems that operate in isolation---and shift toward a new paradigm, a distributed framework of heterogeneous systems that cooperate to achieve an effective defense. Heterogeneity is dictated by two major factors. First, the necessary requirements for a successful …

Metadata

publication

Proceedings of the 2003 workshop on New security paradigms, 11-18, 2003

year

2003

publication date

2003/8/13

authors

Jelena Mirkovic, Max Robinson, Peter Reiher

link

https://dl.acm.org/doi/abs/10.1145/986655.986658

resource_link

http://www.nspw.org/papers/2003/nspw2003-mirkovic.pdf

book

Proceedings of the 2003 workshop on New security paradigms

pages

11-18