OverDoSe: A generic DDoS protection service using an overlay network

TitleOverDoSe: A generic DDoS protection service using an overlay network
Publication TypeReports
Year of Publication2006
AuthorsElaine Shi, Stoica I, Andersen DG, Perrig A
Date Published2006
InstitutionSchool of Computer Science, Carnegie Mellon University
ISBN NumberCMU-CS-06-114
Abstract

We present the design and implementation of OverDoSe, an overlay network offering generic DDoS protection for targeted sites. OverDoSe clients and servers are isolated at the IP level. Overlay nodes route packets between a client and a server, and regulate traffic according to the server’s instructions. Through the use of light-weight security primitives, OverDoSe achieves resilience against compromised overlay nodes with a minimal performance overhead. OverDoSe can be deployed by a single ISP who wishes to offer DDoS protection as a value-adding service to its customers.

URLhttp://repository.cmu.edu/cgi/viewcontent.cgi?article=1073&context=compsci
DOI