Simulation of internet backbone under DDo S Attacks

Simulation of internet backbone under DDo. S Attacks Simulation of adaptive Network Reconfiguration under Overwhelming Denial of Service Attack by John William Lefever’s Thesis Project(2010) Rajya Badam

Outline Purpose Various DDo. S Defense Mechanisms Network Topology Benefits Results Conclusion Future Work

Purpose DDo. S Attackers behaving like normal traffics ◦ Firewall systems and Router filters Traffic flow ◦ Size and timing of request BGP, DNS Reduces impact on ISP’s GTnet. S Simulator

DDo. S Defense Mechanisms

Network Topology

Benefits No operator intervention No differentiation due to patterns or anomalies No difference between 'good‘ and 'bad‘ networks No need to maintain state information No reconfiguration of network's topology No reconfiguration of peers to their network No post-attack reconfiguration

Optimal Performance

Impact on Traffic

32 Servers : 50 Attackers : 1024 Clients

Conclusion Attack traffic was easily separated from legitimate traffic DNS rotation interval strategy worked Dropped massive amounts of legitimate seeming attack traffic Gives illusion of successful attack to attackers More than twice as many IP addresses Best for high attackers/clients ratio

Future Work Self-optimizing algorithm must be developed BGP must be implemented in the real world black-hole routing Implement in the real world environment, to find the performance of the simulation