Mitigation of DDoS Attacks through Pushback and Resource Regulation

The current Internet is vulnerable to attacks and failures. The past events have illustrated the Internet's vulnerability to distributed denial of service (DDoS) attacks. This paper proposes a general, and not attack specific, defense strategy through Pushback and resource regulation to mitigate the effect of such attacks. Routers cooperate with victim in implementing the defense strategy. Pushback based on the improved aggregate-based congestion control (IACC) algorithm applies to routers in order to defend bandwidth consumption attacks, while resource regulation applies to victim in order to defend resource consumption attacks. Through distributed detection and filter, the novel strategy can effectively mitigate the effect of the common DDoS attacks including the bandwidth consumption and resource consumption attacks.