Communication system and DDoS cooperation coping method

摘要

PROBLEM TO BE SOLVED: To provide a DDoS attack coordination coping technique capable of simultaneously realizing both congestion avoidance of a link band between autonomous systems (AS) and resource use leveling of each AS defence function.SOLUTION: A communication system includes a plurality of autonomous systems (AS) and each AS includes a DDoS coordination coping device 100 and a mitigation device. In order to coping in coordination with a DDoS attack detected at a target AS, a readjustment request including a minimum coping amount, a total value of communication traffic destined to the target AS, an amount of attack destined to the target AS in coping, and an available resource amount of the mitigation device in response to a coping request transmitted by the DDoS coordination coping device of the target AS is transmitted from an AS closest to an attack source AS to a downstream AS. The DDoS attack coordination coping device of an AS which has received the readjustment request determines a resource utilization rate by solving an optimization problem to level resources of each AS used for coordination coping on the basis of the readjustment request and information of the AS itself.SELECTED DRAWING: Figure 3