Low-rate TCP-targeted denial of service attacks

摘要: Denial of Service attacks are presenting an increasing threat to the global inter-networking infrastructure. While TCP's congestion control algorithm is highly robust diverse network conditions, its implicit assumption end-system cooperation results in a well-known vulnerability attack by high-rate non-responsive flows. In this paper, we investigate class low-rate denial service which, unlike attacks, difficult for routers and counter-DoS mechanisms detect. Using combination analytical modeling, simulations, Internet experiments, show that maliciously chosen DoS traffic patterns exploit retransmission time-out mechanism can throttle TCP flows small fraction their ideal rate while eluding detection. Moreover, as such protocol homogeneity, study fundamental limits ability randomized thwart attacks.