DeDoS: Defusing DoS with Dispersion Oriented Software
DeDoS: Defusing DoS with Dispersion Oriented Software
复制标题
DOI：
10.1145/3274694.3274727
复制
发表时间：
2018-12
期刊：
影响因子：
--
通讯作者：
Henri Maxime Demoulin;Tavish Vaidya;Isaac Pedisich;Bob DiMaiolo;J. Qian;C. Shah;Yuankai Zhang;Ang Chen;Andreas Haeberlen;B. T. Loo;L. T. Phan;M. Sherr;C. Shields;Wenchao Zhou
中科院分区：
文献类型：
--
作者：
Henri Maxime Demoulin;Tavish Vaidya;Isaac Pedisich;Bob DiMaiolo;J. Qian;C. Shah;Yuankai Zhang;Ang Chen;Andreas Haeberlen;B. T. Loo;L. T. Phan;M. Sherr;C. Shields;Wenchao Zhou
本文介绍了一种新的平台，用于减轻非对称拒绝服务攻击的DeDoS。这些攻击特别具有挑战性，因为即使是资源有限的攻击者也可以耗尽配置良好的服务器的资源。DDoS提供了一个框架，以高度模块化的方式部署代码。如果部分应用程序堆栈正在遭受DoS攻击，则DDoS可以仅大规模复制受影响的组件（可能跨多台计算机）。这允许将受影响的资源与应用程序堆栈的其余部分分开扩展，以便可以在需要的地方精确地添加资源以对抗攻击。我们的评估结果表明，DDoS在正常操作中会产生合理的开销，并且在防御一系列非对称攻击时，它的性能显着优于标准复制技术。
This paper presents DeDoS, a novel platform for mitigating asymmetric DoS attacks. These attacks are particularly challenging since even attackers with limited resources can exhaust the resources of well-provisioned servers. DeDoS offers a framework to deploy code in a highly modular fashion. If part of the application stack is experiencing a DoS attack, DeDoS can massively replicate only the affected component, potentially across many machines. This allows scaling of the impacted resource separately from the rest of the application stack, so that resources can be precisely added where needed to combat the attack. Our evaluation results show that DeDoS incurs reasonable overheads in normal operations, and that it significantly outperforms standard replication techniques when defending against a range of asymmetric attacks.