Controlling high bandwidth aggregates in the network Export

@article{citeulike:5961080, abstract = {The current Internet infrastructure has very few built-in protection mechanisms, and is therefore vulnerable to attacks and failures. In particular, recent events have illustrated the Internet's vulnerability to both denial of service (DoS) attacks and flash crowds in which one or more links in the network (or servers at the edge of the network) become severely congested. In both DoS attacks and flash crowds the congestion is due neither to a single flow, nor to a general increase in traffic, but to a well-defined subset of the traffic --- an aggregate . This paper proposes mechanisms for detecting and controlling such high bandwidth aggregates. Our design involves both a local mechanism for detecting and controlling an aggregate at a single router, and a cooperative pushback mechanism in which a router can ask upstream routers to control an aggregate. While certainly not a panacea, these mechanisms could provide some needed relief from flash crowds and flooding-style DoS attacks. The presentation in this paper is a first step towards a more rigorous evaluation of these mechanisms.}, address = {New York, NY, USA}, author = {Mahajan, Ratul and Bellovin, Steven M. and Floyd, Sally and Ioannidis, John and Paxson, Vern and Shenker, Scott}, citeulike-article-id = {5961080}, citeulike-linkout-0 = {http://portal.acm.org/citation.cfm?id=571697.571724}, citeulike-linkout-1 = {http://dx.doi.org/10.1145/571697.571724}, doi = {10.1145/571697.571724}, issn = {0146-4833}, journal = {SIGCOMM Comput. Commun. Rev.}, keywords = {aggregate, bandwidth, control}, number = {3}, pages = {62--73}, posted-at = {2009-10-18 09:10:40}, priority = {2}, publisher = {ACM}, title = {Controlling high bandwidth aggregates in the network}, url = {http://dx.doi.org/10.1145/571697.571724}, volume = {32}, year = {2002} }

TY - JOUR ID - citeulike:5961080 L3 - citeulike-article-id:5961080 N2 - The current Internet infrastructure has very few built-in protection mechanisms, and is therefore vulnerable to attacks and failures. In particular, recent events have illustrated the Internet's vulnerability to both denial of service (DoS) attacks and flash crowds in which one or more links in the network (or servers at the edge of the network) become severely congested. In both DoS attacks and flash crowds the congestion is due neither to a single flow, nor to a general increase in traffic, but to a well-defined subset of the traffic --- an aggregate . This paper proposes mechanisms for detecting and controlling such high bandwidth aggregates. Our design involves both a local mechanism for detecting and controlling an aggregate at a single router, and a cooperative pushback mechanism in which a router can ask upstream routers to control an aggregate. While certainly not a panacea, these mechanisms could provide some needed relief from flash crowds and flooding-style DoS attacks. The presentation in this paper is a first step towards a more rigorous evaluation of these mechanisms. IS - 3 JF - SIGCOMM Comput. Commun. Rev. SN - 0146-4833 AD - New York, NY, USA EP - 73 TI - Controlling high bandwidth aggregates in the network PB - ACM VL - 32 SP - 62 KW - aggregate KW - bandwidth KW - control AU - Mahajan, Ratul AU - Bellovin, Steven AU - Floyd, Sally AU - Ioannidis, John AU - Paxson, Vern AU - Shenker, Scott PY - 2002/// UR - http://dx.doi.org/10.1145/571697.571724 ER -