1. Article Name: The Need for a Multi-Perspective Approach to Solve the DDoS Problem.
Author: Jorge Hernandez-Herrero and Jon A. Solworth
Bells Labs Technical Journal
Distribute denial of service.
Distributed denial of service (DDoS) attacks are a common event in today’s Internet,
affecting small and large organizations. Criminal organizations use DDoS as the means to
carry out extortion. Before engaging a set of compromised hosts in a DDoS attack, attackers
must create a DDoS botnet or agent network, coordinate attack activities among them and
execute the attack. The distribution and size of attack sources, spoofing, and the use of
reflectors make trace back a challenging task. In order to deploy a DDoS solution
successfully, it must either be mandated or offer valuable incentives. Another solution for
the DDoS attacks is to do a Blackhole routing. Blackhole routing discards all traffic to the
victim including legitimate traffic hence, the network and service sub problems are not
solved. A benefit of this technique is that it eliminates collateral damage since the filtering
of the network address is precise. In essence, solving the DDoS problem requires dealing
with a missing piece of functionality in the TCP/IP protocol stack. While the IP layer
unifies and identifies the network elements connected to the Internet, it lacks authentication
and authorization concepts that can prevent unwanted network traffic.