Defending Against Distributed Denial of Service Attacks Using Selective Pushback

In this paper, we introduce a router-based system to defend against Distributed Denial of Service (DDoS) attacks. DDoS attacks are treated as a congestioncontrol problem. The main issue is to identify the congestion and then pushback a packet filter to the router closest to the source that causes congestion. Unlike previous approaches, we propose an anomaly detection scheme using source information. Since the source IP address is not trustable, we obtain source information by probabilistic packet marking. By filtering packets using source information, we can filter malicious traffic while protecting legitimate traffic.