Defending against Distributed Denial of Service (DDoS) Attacks with Queue Traffic Differentiation over Micro-MPLS-based Wireless Networks

摘要

Traditional security research has been on privacy or authentication. Unfortunately, attacks on wireless media cannot be simply addressed using traditional security methods [1]. An example of a security threat which is difficult to address using traditional network security techniques is Denial of Service (DoS) attacks. Under DoS attacks it is difficult to provide legitimate users their fair shares of bandwidth. However, it is important to allocate a fair share of bandwidth for multimedia traffic requiring Quality of Service. In this paper we address the issue of DoS attacks between mobile nodes and MPLS domains by proposing a queue differentiation policy at the entry point of the MPLS domain. We also investigated DoS attacks of the entry point (Foreign Domain Agent) into Micro-MPLS-based networks (otherwise know a Hierarchical Mobile MPLS (H-MPLS)) [2]. Our simulation results show that our proposed technique provides maximum resource utilization by increasing the throughput of multimedia traffic while the network is under DoS attacks.