Responsive Aggregate Defence for Denial of Service Attacks

Denial-of-service attacks have become a regular occurrence on the Internet. The current architecture of the Internet, coupled with the relative ease with which software bugs can be exploited on Internet-connected hosts, provides a fruitful environment for the creation of malicious traffic attacks. This article proposes a novel DoS defence scheme based on Active Queue Management (AQM) principles. Responsive Aggregate Defence (RAD) provides effective penalisation of flooding DoS attacks at the router queue. RAD combines protection of TCPlike traffic behaviours, with a lightweight architecture that allows scalable implementation on a wide variety of network scenarios.