Near-optimal Joint Defense Strategies against DDoS

Attacks Based upon Packet Filtering and Blocking Enabled by

Packet Marking Mechanism

以封包標注為基礎之分散式阻絕服務攻擊封包過濾及阻塞之近似最佳化聯防策略

Problem Description Scenario Models

ARACTS Model PPM-FRABS Model

Approximation Method Heuristic for ARACTS model

Problem Description Scenario Models

ARACTS Model PPM-FRABS Model

LR Subproblems Heuristic

DDoS attack has become a serious problem to User, ASP, Network Operator

Filtering can help the victim to regulate the incoming traffic However, the legitimate packets might also

be throttled as malicious ones Packet Marking can help filtering to

reach a better performance

In this thesis,

we take Filtering, Packet Marking and Blocking into consideration; and formulate the problem into a mathematical form.

We consider Three Parties, Attacker, ASP and Network Operator, scenario.

Packet Marking Scheme

Problem Description Scenario Models

ARACTS Model PPM-FRABS Model

LR Subproblems Heuristic

Problem Description Scenario Models

ARACTS Model PPM-FRABS Model

LR Subproblems Heuristic

channel

Problem Description Scenario Models

ARACTS Model PPM-FRABS Model

LR Subproblems Heuristic

Problem Description Scenario Models

ARACTS Model PPM-FRABS Model

Approximation Method Heuristic

Approximation Method()

Problem Description Scenario Models

ARACTS Model PPM-FRABS Model

LR Subproblems Heuristic for ARACTS model

Thank you for your listening