NICOP - Smokescreen: A Study of a DDoS-resilient Network Architecture through Traffic Classification and Isolation
Abstract
The front line in the modern battlefield is the Internet. Various organizations including criminals, terrorists, companies commit cy"berattacks to another for the purposes of causing damage or disruption. It is not a secret anymore that many countries are developin"g ways to use the Internet as an attack platform targeting hostile organizations computer system. In the middle of the warfare, DDoS" attack still stands as one of the most powerful weapon that can cause serious damages to another with very small effort and cheap c"ost. Current Internet has the weakness of availability from simple DDoS attacks, so lots of studies have been done. However current" DDoS countermeasures are not protective since link congestions always exist no matter how nice filtering technologies are applied." Furthermore, considering the fact that modern military missions and capabilities are relying on the computer and communication tech""nologies, DDoS attack defense can be regarded as another way of homeland security.From the concern, we propose a new defense mechan""ism and network design, called Smokescreen, for a DDoS resilient network. Smokescreen is an integration of cloud technology and futu""re Internet architecture, that were developed under the consideration of load balancing and traffic classification. The cloud techno"logy increases the server availability with attack traffic distribution and isolation. The future Internet architecture supports mul"ti-path communication, and thus, it allows us to dramatically improve the network connectivity in any situation. In this research, w""e diagnose the limitation of the legacy network in a theoretical approach, and perform network modeling and availability measurement" in regard to minimizing the probability of network link congestion and maximizing the network connectivity. We also measure the imp"lementability in order to make Smokescreen real-world technology. Finally, we evaluate Smokescreen in terms of efficiency, effective""ness, robustness and practicality of proposed system. This research would be resulted in forms of research papers.
Document Details
- Document Type
- DoD Grant Award
- Publication Date
- Nov 03, 2017
- Source ID
- N629091712172
Entities
People
- Heejo Lee
Organizations
- Korea University
- Office of Naval Research
- United States Navy