Trust Based Traffic Monitoring Approach for Preventing Denial of Service Attacks

摘要

Denial of service attacks pose a serious challenge to networks as a whole and especially to the Internet. In addition to the strategies in place to control the attack, preventing the attack helps in saving essential network resources. The paper proposes a trust based approach towards preventing such attacks for active networks and is tested using ANTS, an active network test bed. The proposed algorithm is built on reputation based trust approach whereby the peer nodes interact amongst themselves to find the trustworthiness of other participating nodes in the neighborhood based on their reply. Further the packets originating from a node are monitored and using the features of the packet header, a centroid is found for each node using clustering technique and the result of this is combined with the trust already found to make the system more effective in detecting the attack packets and weed out the malicious node with less false alarms.