Adaptive Resource Management Enabling Deception (ARMED)

摘要: Distributed Denial of Service (DDoS) attacks routinely disrupt access to critical services. Mitigation these often relies on planned over-provisioning or elastic provisioning resources, and third-party monitoring, analysis, scrubbing network traffic. While volumetric which saturate a victim's are most common, non-volumetric, low slow, DDoS can achieve their goals without requiring high traffic volume by targeting vulnerable protocols protocol implementations. Non-volumetric attacks, unlike noisy counterparts, require more sophisticated detection mechanisms, typically have only post-facto targeted protocol/application mitigations. In this paper, we introduce our work under the Adaptive Resource Management Enabling Deception (ARMED) effort, is developing network-level approach automatically mitigate through deception-focused adaptive maneuvering. We describe concept, implementation, initial evaluation ARMED Network Actors (ANAs) that facilitate transparent interception, sensing, mounting responses adversary's decision process.