CluB: A Cluster Based Method for Mitigating Distributed Denial of Service Attacks

Rapport, 2009

Distributed Denial of Service attacks are a threat not only for their direct targets but also for the core of the network. They are also hard to detect, hence methods to deal with them need to be proactive. By building on earlier work and improving on distribution of control aspects, we propose a proactive method, which we call CluB, to mitigate such attacks; the method balances the effectiveness-overhead trade-off by addressing the issue of granualarity of control in the network. CluB, can collaborate with different routing policies in the network, including contemporary datagram options. We estimate the effectiveness of the method and also study a set of factors for tunning the granularity of control.