| Paper Abstract and Keywords |
| Presentation |
2007-09-21 09:50
A Practical Feasibility Study of a Network Control Method for Sharing DDoS-Attack Mitigation Devices Takeshi Yagi, Takeshi Kuwahara, Junichi Murayama (NTT) IN2007-60 |
| Abstract |
(in Japanese) |
(See Japanese page) |
| (in English) |
This paper reports results of feasibility study about dynamic traffic control methods to re-route traffic into DDoS-attack mitigation devices. In this method, anomaly traffic is re-routed from a point close to the victim user into a DDoS attack mitigation device. For rerouting anomaly traffic, we evaluated some conventional forwarding techniques, such as LSP and GRE tunnel. As a result, we deployed hop-by-hop policy-routing technique and implemented a traffic control server which can support operations of the network. In this case, the traffic control server should manage the whole network and control routers for setting hop-by-hop policy-routes. So there is some possibility that the traffic control server become bottleneck in large-scale networks. To confirm scalability of the proposed method, we evaluated control time of the proposed method by using prototype systems. Consequently, regardless of the number of routers on each hop-by-hop policy-route, control time on the traffic control server is small so that the traffic control server will not become bottleneck. |
| Keyword |
(in Japanese) |
(See Japanese page) |
| (in English) |
security / anomaly traffic / DDoS-attack / traffic control / policy routing / / / |
| Reference Info. |
IEICE Tech. Rep., vol. 107, no. 222, IN2007-60, pp. 99-104, Sept. 2007. |
| Paper # |
IN2007-60 |
| Date of Issue |
2007-09-13 (IN) |
| ISSN |
Print edition: ISSN 0913-5685 Online edition: ISSN 2432-6380 |
Copyright and reproduction |
All rights are reserved and no part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopy, recording, or any information storage and retrieval system, without permission in writing from the publisher. Notwithstanding, instructors are permitted to photocopy isolated articles for noncommercial classroom use without fee. (License No.: 10GA0019/12GB0052/13GB0056/17GB0034/18GB0034) |
| Download PDF |
IN2007-60 |
| Conference Information |
| Committee |
NS CS IN |
| Conference Date |
2007-09-20 - 2007-09-21 |
| Place (in Japanese) |
(See Japanese page) |
| Place (in English) |
Tohoku University |
| Topics (in Japanese) |
(See Japanese page) |
| Topics (in English) |
Overlay networks, VPN, DDos, network security, p2p communications, network software, etc. |
| Paper Information |
| Registration To |
IN |
| Conference Code |
2007-09-NS-CS-IN |
| Language |
Japanese |
| Title (in Japanese) |
(See Japanese page) |
| Sub Title (in Japanese) |
(See Japanese page) |
| Title (in English) |
A Practical Feasibility Study of a Network Control Method for Sharing DDoS-Attack Mitigation Devices |
| Sub Title (in English) |
|
| Keyword(1) |
security |
| Keyword(2) |
anomaly traffic |
| Keyword(3) |
DDoS-attack |
| Keyword(4) |
traffic control |
| Keyword(5) |
policy routing |
| Keyword(6) |
|
| Keyword(7) |
|
| Keyword(8) |
|
| 1st Author's Name |
Takeshi Yagi |
| 1st Author's Affiliation |
NIPPON TELEGRAPH AND TELEPHONE CORPORATION (NTT) |
| 2nd Author's Name |
Takeshi Kuwahara |
| 2nd Author's Affiliation |
NIPPON TELEGRAPH AND TELEPHONE CORPORATION (NTT) |
| 3rd Author's Name |
Junichi Murayama |
| 3rd Author's Affiliation |
NIPPON TELEGRAPH AND TELEPHONE CORPORATION (NTT) |
| 4th Author's Name |
|
| 4th Author's Affiliation |
() |
| 5th Author's Name |
|
| 5th Author's Affiliation |
() |
| 6th Author's Name |
|
| 6th Author's Affiliation |
() |
| 7th Author's Name |
|
| 7th Author's Affiliation |
() |
| 8th Author's Name |
|
| 8th Author's Affiliation |
() |
| 9th Author's Name |
|
| 9th Author's Affiliation |
() |
| 10th Author's Name |
|
| 10th Author's Affiliation |
() |
| 11th Author's Name |
|
| 11th Author's Affiliation |
() |
| 12th Author's Name |
|
| 12th Author's Affiliation |
() |
| 13th Author's Name |
|
| 13th Author's Affiliation |
() |
| 14th Author's Name |
|
| 14th Author's Affiliation |
() |
| 15th Author's Name |
|
| 15th Author's Affiliation |
() |
| 16th Author's Name |
|
| 16th Author's Affiliation |
() |
| 17th Author's Name |
|
| 17th Author's Affiliation |
() |
| 18th Author's Name |
|
| 18th Author's Affiliation |
() |
| 19th Author's Name |
|
| 19th Author's Affiliation |
() |
| 20th Author's Name |
|
| 20th Author's Affiliation |
() |
| 21st Author's Name |
|
| 21st Author's Affiliation |
() |
| 22nd Author's Name |
|
| 22nd Author's Affiliation |
() |
| 23rd Author's Name |
|
| 23rd Author's Affiliation |
() |
| 24th Author's Name |
|
| 24th Author's Affiliation |
() |
| 25th Author's Name |
|
| 25th Author's Affiliation |
() |
| 26th Author's Name |
/ / |
| 26th Author's Affiliation |
()
() |
| 27th Author's Name |
/ / |
| 27th Author's Affiliation |
()
() |
| 28th Author's Name |
/ / |
| 28th Author's Affiliation |
()
() |
| 29th Author's Name |
/ / |
| 29th Author's Affiliation |
()
() |
| 30th Author's Name |
/ / |
| 30th Author's Affiliation |
()
() |
| 31st Author's Name |
/ / |
| 31st Author's Affiliation |
()
() |
| 32nd Author's Name |
/ / |
| 32nd Author's Affiliation |
()
() |
| 33rd Author's Name |
/ / |
| 33rd Author's Affiliation |
()
() |
| 34th Author's Name |
/ / |
| 34th Author's Affiliation |
()
() |
| 35th Author's Name |
/ / |
| 35th Author's Affiliation |
()
() |
| 36th Author's Name |
/ / |
| 36th Author's Affiliation |
()
() |
| Speaker |
Author-1 |
| Date Time |
2007-09-21 09:50:00 |
| Presentation Time |
20 minutes |
| Registration for |
IN |
| Paper # |
IN2007-60 |
| Volume (vol) |
vol.107 |
| Number (no) |
no.222 |
| Page |
pp.99-104 |
| #Pages |
6 |
| Date of Issue |
2007-09-13 (IN) |