首页> 外文会议>IEEE Symposium on Reliable Distributed Systems >WRAPS: Denial-of-Service Defense through Web Referrals
【24h】

WRAPS: Denial-of-Service Defense through Web Referrals

机译:包装:通过网络推荐拒绝服务防御

获取原文

摘要

The web is a complicated graph, with millions of websites interlinked together. In this paper, we propose to use this web sitegraph structure to mitigate flooding attacks on a website, using a new web referral architecture for privileged service ("WRAPS"). WRAPS allows a legitimate client to obtain a privilege URL through a click on a referral hypher-link, from a website trusted by the target website. Using that URL, the client can get privileged access to the target website in a manner that is far less vulnerable to a DDoS flooding attack. WRAPS does not require changes to web client software and is extremely lightweight for referrer websites, which eases its deployment. The massive scale of the web sitegraph could deter attempts to isolate a website through blocking all referrers. We present the design of WRAPS, and the implementation of a prototype system used to evaluate our proposal. Our empirical study demonstrates that WRAPS enables legitimate clients to connect to a website smoothly in spite of an intensive flooding attack, at the cost of small overheads on the website's ISP's edge routers.
机译:Web是一个复杂的图表,其中数百万个网站相互连接在一起。在本文中,我们建议使用此网站Graph结构来减轻网站上的洪水攻击,使用新的Web推荐架构进行特权服务(“包装”)。包装允许合法客户端从目标网站信任的网站上单击推荐间链接获取权限URL。使用该URL,客户端可以以远低于DDOS泛滥攻击的方式获取对目标网站的特权访问。包装不需要更改Web客户端软件,并且为引用者网站非常轻量级,这会缓解其部署。网站图的大规模可以通过阻止所有推荐人来阻止尝试隔离网站。我们介绍了包装的设计,以及用于评估我们提案的原型系统的实现。我们的实证研究表明,尽管有密集的洪水攻击,包装的包装使得合法的客户能够顺利地连接到网站,以网站ISP的边缘路由器的小开销。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号