FastPass: Providing First-Packet Delivery

摘要: This paper introduces FastPass, an architecture that thwarts flooding attacks by providing destinations with total control over their upstream network capacity. FastPass explores extreme design point, complete resistance to directed attacks. builds upon prior work on capabilities and addresses the oft-noted problem in such schemes, a sender must first get one packet through no protection against DoS. provides cryptographic availability tokens senders routers verify before expiditing delivery. We present two variants of tokens. The uses light-weight public key cryptography is practical high-speed modest hardware additions. second symmetric hashchaining scheme easily implemented software. In sharp contrast systems, our evaluation shows hosts using can quickly communicate regardless size attack nodes.