D-WARD: a source-end defense against flooding denial-of-service attacks

摘要: Defenses against flooding distributed denial-of-service (DDoS) commonly respond to the attack by dropping excess traffic, thus reducing overload at victim. The major challenge is differentiation of legitimate from so that policies can be selectively applied. We propose D-WARD, a source-end DDoS defense system achieves autonomous detection and surgically accurate response, thanks its novel traffic profiling techniques, adaptive response deployment. Moderate volumes seen near sources, even during attacks, enable extensive statistics gathering profiling, facilitating high selectiveness. D-WARD inflicts an extremely low collateral damage while quickly detecting severely rate-limiting outgoing attacks. has been extensively evaluated in controlled testbed environment real network operation. Results selected tests are presented paper.