Automated immunization against Denial-of-Service attacks featuring stochastic packet inspection

Abstract

Denial of Service attacks are easy to implement, difficult to trace, and inflict serious damage on target networks in a short amount of time. This model eliminates attack packets from a router using probability packet inspection as an automated defense against DoS. The detection module begins with an initial probability for inspecting packets. As an attack commences and the occupied bandwidth of the channel increases, the detection module optimizes the inspection probability. © Springer-Verlag Berlin Heidelberg 2005.