A Demonstration of the DeDoS Platform for Defusing Asymmetric DDoS Attacks in Data Centers

摘要: We propose a demonstration of DeDoS, platform for mitigating asymmetric DDoS attacks. These attacks are particularly challenging since attackers using limited resources can exhaust the even well-provisioned servers. DeDoS resolves this by splitting monolithic software stacks into separable components called minimum splittable units (MSUs). If part application stack is experiencing attack, massively replicate only affected MSUs, potentially across many machines. This allows scaling impacted resource separately from rest so that be precisely added where needed to combat attack. Our will show incurs reasonable overheads in normal operations and it significantly outperforms naive replication when defending against range