VPNshield: protecting VPN services from denial-of-service (DoS) attacks

摘要

Employing survivability techniques developed by Architecture Technology Corporation (ATC) under the DARPA OASIS program, VPNshield implements DoS-resistant (or survivable) VPNs that provide continuous, uninterrupted operation of VPN services in spite of access link flooding attacks. In contrast to existing infrastructure based approaches for detecting and countering these attacks, the VPNshield approach relies on survivability techniques that are implemented within the edge networks. That is, the survivability mechanisms associated with this approach require no modifications or additions to equipment in the core network infrastructure owned by the service provider.