TY - GEN
T1 - DDoS mitigation in non-cooperative environments
AU - Yan, Guanhua
AU - Eidenbenz, Stephan
PY - 2008
Y1 - 2008
N2 - Distributed denial of service (DDoS) attacks have plagued the Internet for many years. We propose a system to defend against DDoS attacks in a non-cooperative environment, where upstream intermediate networks need to be given an economic incentive in order for them to cooperate in the attack mitigation. Lack of such incentives is a root cause for the rare deployment of distributed DDoS mitigation schemes. Our system is based on game-theoretic principles that provably provide incentives to each participating AS (Autonomous Systems) to report its true defense costs to the victim, which computes and compensates the most cost-efficient (yet still effective) set of defenders ASs. We also present simulation results with real AS-level topologies to demonstrate the economic feasibility of our approach.
AB - Distributed denial of service (DDoS) attacks have plagued the Internet for many years. We propose a system to defend against DDoS attacks in a non-cooperative environment, where upstream intermediate networks need to be given an economic incentive in order for them to cooperate in the attack mitigation. Lack of such incentives is a root cause for the rare deployment of distributed DDoS mitigation schemes. Our system is based on game-theoretic principles that provably provide incentives to each participating AS (Autonomous Systems) to report its true defense costs to the victim, which computes and compensates the most cost-efficient (yet still effective) set of defenders ASs. We also present simulation results with real AS-level topologies to demonstrate the economic feasibility of our approach.
UR - https://www.scopus.com/pages/publications/44649146686
U2 - 10.1007/978-3-540-79549-0_52
DO - 10.1007/978-3-540-79549-0_52
M3 - Conference contribution
SN - 3540795480
SN - 9783540795483
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 599
EP - 611
BT - NETWORKING 2008
T2 - 7th International IFIP-TC6 Networking Conference - NETWORKING 2008: AdHoc and Sensor Networks, Wireless Networks, Next Generation Internet
Y2 - 5 May 2008 through 5 September 2008
ER -