Deployable Filtering Architectures Against Denial-of-Service Attacks

The Denial-of-Service attack problem continues to grow despite the fact that many solutions have been proposed in the research literature and the commercial field. The problem is not that the solutions have not had technical merit, but that they have either not scaled to architectural levels or they have had serious deployment issues. As a result, there is still no comprehensive, architectural solution to the problem of large, distributed DoS attacks. This report presents three incrementally-deployable architectures against DoS that provide clear incentives for early adopters while improving in effectiveness as deployment progresses. The report also discusses completed research as well as a future experiment plan to show that the architectures would be able to cope with large attacks even when their components are built using cheap, off-the-shelf hardware.