ML: DDoS Damage Control with MPLS - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2016

ML: DDoS Damage Control with MPLS

Résumé

We present a DDoS mitigation mechanism dispatching suspicious and legitimate traffic into separate MultiProtocol Label Switching (MPLS) tunnels, well upstream from the target. The objective is to limit the impact a voluminous attack could otherwise have on the legitimate traffic through saturation of network resources. The separation of traffic is based on a signature identifying suspicious flows, carried in an MPLS label, and then used by a load-balancing mechanism in a router. The legitimite traffic is preserved at the expense of suspcious flows, whose resource allocations are throttled as needed to avoid congestion.
Fichier non déposé

Dates et versions

hal-01387569 , version 1 (25-10-2016)

Identifiants

Citer

Pierre-Edouard Fabre, Hervé Debar, Jouni Viinikka, Gregory Blanc. ML: DDoS Damage Control with MPLS. NordSec 2016, Nov 2016, Oulu, Finland. pp.101--116, ⟨10.1007/978-3-319-47560-8_7⟩. ⟨hal-01387569⟩
142 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More