查看文章

Chris Misa, Ramakrishnan Durairajan, Arpit Gupta, Reza Rejaie, Walter Willinger

2024/5/10

2024 IEEE Symposium on Security and Privacy (SP)

205-205

IEEE Computer Society

Leveraging Prefix Structure to Detect Volumetric DDoS Attack Signatures with Programmable Switches Page 1 Leveraging Prefix Structure to Detect Volumetric DDoS Attack Signatures with Programmable Switches Chris Misa Ramakrishnan Durairajan Reza Rejaie Arpit Gupta Walter Willinger University of Oregon NIKSUN, Inc. UCSB 2024-05-21 Page 2 [email protected] 2 Background: IP Addresses {0.0.0.0,… …,255.255.255.255} …,128.0.0.0,… IPv4 “Address space” Page 3 [email protected] 3 Protected Server Internet Border Switch Edge Network Background: IP Address Prefixes {0.0.0.0,… …,255.255.255.255} Benign source IP address …,128.0.0.0,… IPv4 “Address space” Sources in Common “Child” Prefix Prefix in Common “Parent” Prefix 0.0.0.0/0 0.0.0.0/1 128.0.0.0/1 0.0.0.0/2 64.0.0.0/2 Page 4 [email protected] 4 Protected Server Internet Border Switch Edge Network Setting: Edge …