Anycast and its potential for DDoS mitigation

Wouter Bastiaan de Vries; R. de Oliveira Schmidt; Aiko Pras

doi:10.1007/978-3-319-39814-3_16

Anycast and its potential for DDoS mitigation

Wouter Bastiaan de Vries, R. de Oliveira Schmidt, Aiko Pras

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

3 Citations (Scopus)

29 Downloads (Pure)

Abstract

IP anycast is widely being used to distribute essential Internet services, such as DNS, across the globe. One of the main reasons for doing so is to increase the redundancy of the service and reduce the impacts of the growing threat of DDoS attacks. IP anycast can be further used to mitigate DDoS attacks by confining the attack traffic to certain areas. This might cause the targeted service to become unavailable only to a fraction of its users. In this PhD research we aim at investigating how IP anycast can be optimized both statically and dynamically to support the mitigation of DDoS attacks.

Original language	English
Title of host publication	Management and Security in the Age of Hyperconnectivity. Proceedings of the 10th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2016
Place of Publication	Switzerland
Publisher	Springer
Pages	147-151
Number of pages	5
ISBN (Print)	978-3-319-39813-6
DOIs	https://doi.org/10.1007/978-3-319-39814-3_16
Publication status	Published - Jun 2016
Event	10th IFIP WG 6.6 International Conference on Management and Security in the Age of Hyperconnectivity, AIMS 2016 - Munich, Germany Duration: 20 Jun 2016 → 23 Jun 2016 Conference number: 10

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer
Volume	9701
ISSN (Print)	0302-9743

Conference

Conference	10th IFIP WG 6.6 International Conference on Management and Security in the Age of Hyperconnectivity, AIMS 2016
Abbreviated title	AIMS 2016
Country/Territory	Germany
City	Munich
Period	20/06/16 → 23/06/16

Keywords

Internet
Measurements
DDoS
EWI-27755
Anycast
testbed

Access to Document

10.1007/978-3-319-39814-3_16

Cite this

de Vries, W. B., de Oliveira Schmidt, R., & Pras, A. (2016). Anycast and its potential for DDoS mitigation. In Management and Security in the Age of Hyperconnectivity. Proceedings of the 10th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2016 (pp. 147-151). (Lecture Notes in Computer Science; Vol. 9701). Springer. https://doi.org/10.1007/978-3-319-39814-3_16

de Vries, Wouter Bastiaan ; de Oliveira Schmidt, R. ; Pras, Aiko. / Anycast and its potential for DDoS mitigation. Management and Security in the Age of Hyperconnectivity. Proceedings of the 10th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2016. Switzerland : Springer, 2016. pp. 147-151 (Lecture Notes in Computer Science).

@inproceedings{ce709b8d17a14d2bafe99ef3ea70da52,

title = "Anycast and its potential for DDoS mitigation",

abstract = "IP anycast is widely being used to distribute essential Internet services, such as DNS, across the globe. One of the main reasons for doing so is to increase the redundancy of the service and reduce the impacts of the growing threat of DDoS attacks. IP anycast can be further used to mitigate DDoS attacks by confining the attack traffic to certain areas. This might cause the targeted service to become unavailable only to a fraction of its users. In this PhD research we aim at investigating how IP anycast can be optimized both statically and dynamically to support the mitigation of DDoS attacks.",

keywords = "Internet, Measurements, DDoS, EWI-27755, Anycast, testbed",

author = "{de Vries}, {Wouter Bastiaan} and {de Oliveira Schmidt}, R. and Aiko Pras",

year = "2016",

month = jun,

doi = "10.1007/978-3-319-39814-3_16",

language = "English",

isbn = "978-3-319-39813-6",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "147--151",

booktitle = "Management and Security in the Age of Hyperconnectivity. Proceedings of the 10th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2016",

address = "Germany",

note = "10th IFIP WG 6.6 International Conference on Management and Security in the Age of Hyperconnectivity, AIMS 2016, AIMS 2016 ; Conference date: 20-06-2016 Through 23-06-2016",

}

de Vries, WB, de Oliveira Schmidt, R & Pras, A 2016, Anycast and its potential for DDoS mitigation. in Management and Security in the Age of Hyperconnectivity. Proceedings of the 10th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2016. Lecture Notes in Computer Science, vol. 9701, Springer, Switzerland, pp. 147-151, 10th IFIP WG 6.6 International Conference on Management and Security in the Age of Hyperconnectivity, AIMS 2016, Munich, Germany, 20/06/16. https://doi.org/10.1007/978-3-319-39814-3_16

Anycast and its potential for DDoS mitigation. / de Vries, Wouter Bastiaan; de Oliveira Schmidt, R.; Pras, Aiko.
Management and Security in the Age of Hyperconnectivity. Proceedings of the 10th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2016. Switzerland: Springer, 2016. p. 147-151 (Lecture Notes in Computer Science; Vol. 9701).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Anycast and its potential for DDoS mitigation

AU - de Vries, Wouter Bastiaan

AU - de Oliveira Schmidt, R.

AU - Pras, Aiko

N1 - Conference code: 10

PY - 2016/6

Y1 - 2016/6

N2 - IP anycast is widely being used to distribute essential Internet services, such as DNS, across the globe. One of the main reasons for doing so is to increase the redundancy of the service and reduce the impacts of the growing threat of DDoS attacks. IP anycast can be further used to mitigate DDoS attacks by confining the attack traffic to certain areas. This might cause the targeted service to become unavailable only to a fraction of its users. In this PhD research we aim at investigating how IP anycast can be optimized both statically and dynamically to support the mitigation of DDoS attacks.

AB - IP anycast is widely being used to distribute essential Internet services, such as DNS, across the globe. One of the main reasons for doing so is to increase the redundancy of the service and reduce the impacts of the growing threat of DDoS attacks. IP anycast can be further used to mitigate DDoS attacks by confining the attack traffic to certain areas. This might cause the targeted service to become unavailable only to a fraction of its users. In this PhD research we aim at investigating how IP anycast can be optimized both statically and dynamically to support the mitigation of DDoS attacks.

KW - Internet

KW - Measurements

KW - DDoS

KW - EWI-27755

KW - Anycast

KW - testbed

U2 - 10.1007/978-3-319-39814-3_16

DO - 10.1007/978-3-319-39814-3_16

M3 - Conference contribution

SN - 978-3-319-39813-6

T3 - Lecture Notes in Computer Science

SP - 147

EP - 151

BT - Management and Security in the Age of Hyperconnectivity. Proceedings of the 10th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2016

PB - Springer

CY - Switzerland

T2 - 10th IFIP WG 6.6 International Conference on Management and Security in the Age of Hyperconnectivity, AIMS 2016

Y2 - 20 June 2016 through 23 June 2016

ER -

de Vries WB, de Oliveira Schmidt R, Pras A. Anycast and its potential for DDoS mitigation. In Management and Security in the Age of Hyperconnectivity. Proceedings of the 10th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2016. Switzerland: Springer. 2016. p. 147-151. (Lecture Notes in Computer Science). doi: 10.1007/978-3-319-39814-3_16

Anycast and its potential for DDoS mitigation

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Cite this