A Defense Against Address Spoofing Using Active Networks
Year: 1997
Type: dissertation
Abstract: This thesis studies a prevalent denial-of-service attack known as SYN-Flooding and presents a possible defense using active network technology.This attack uses "spoofed" Internet addresses to exploit a weakness in the 3-way handshake used by the Transmission Control Protocol (TCP).It can render a server inaccessible to legitimate users or, even worse, bring a server down completely.As yet, there is no accepted solution to this problem in today's network environment.Active networks, which provide increased computational power within the network itself, have recently been proposed as a means of deploying new network applications and of performing application-specific computation within the network.This thesis illustrates how active networks can be used as defense against this denial-of-service attack.We have built a filter that can be dynamically deployed to filter out forged packets within the network, thereby foiling SYN-Flooding attacks.The current implementation of the filter requires symmetric routing within the network.A future extension to this thesis may be a more general filter that works in less restrictive environments.
Author: Van C. Van
Language: English
Subfield: Computer Networks and Communications
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
OpenAlex ID: W1498041114