Java-networking:
Title:Denial-of-Service Defense through Web Referral:
Abstract - The web is a complicated graph, with millions of websites interlinked together.
In this paper, we propose to use this web site graph structure to mitigate flooding attacks on a website,
using a new web referral architecture for privileged service (?WRAPS?). WRAPS allows a legitimate client to obtain a privilege URL through a click on a referral hyperlink, from a website trusted by the target website. Using that URL, the client can get privileged access to the target website in a manner that is far less vulnerable to a DDOS flooding attack. WRAPS does not require changes to web client software and is extremely lightweight for referrer websites, which eases its deployment. The massive scale of the web site graph could deter attempts to isolate a website through blocking all referrers. We present the design of WRAPS, and the implementation of a prototype system used to evaluate our proposal. Our empirical study demonstrates that WRAPS enables legitimate clients to connect to a website smoothly in spite of an intensive flooding attack, at the cost of small overheads on the website?s ISP?s edge routers.
Title:Denial-of-Service Defense through Web Referral:
Abstract - The web is a complicated graph, with millions of websites interlinked together.
In this paper, we propose to use this web site graph structure to mitigate flooding attacks on a website,
using a new web referral architecture for privileged service (?WRAPS?). WRAPS allows a legitimate client to obtain a privilege URL through a click on a referral hyperlink, from a website trusted by the target website. Using that URL, the client can get privileged access to the target website in a manner that is far less vulnerable to a DDOS flooding attack. WRAPS does not require changes to web client software and is extremely lightweight for referrer websites, which eases its deployment. The massive scale of the web site graph could deter attempts to isolate a website through blocking all referrers. We present the design of WRAPS, and the implementation of a prototype system used to evaluate our proposal. Our empirical study demonstrates that WRAPS enables legitimate clients to connect to a website smoothly in spite of an intensive flooding attack, at the cost of small overheads on the website?s ISP?s edge routers.
0 comments:
Post a Comment