2026-07-20T05:59:58Z https://drops.dagstuhl.de/oai

oai:drops-oai.dagstuhl.de:849 2024-03-06T11:07:04Z ddc:004 open_access

Denial of Service Protection with Beaver Badishi, Gal Keidar, Idit Herzberg, Amir Romanov, Oleg Yachin, Avital Denial of Service We present Beaver, a method and architecture to ``build dams'' to protect servers from Denial of Service (DoS) attacks. Beaver allows efficient filtering of DoS traffic using low-cost, high-performance, readily-available packet filtering mechanisms. Beaver improves on previous solutions by not requiring cryptographic processing of messages, allowing the use of efficient routing (avoiding overlays), and establishing keys and state as needed. We present two prototype implementations of Beaver, one as part of IPSec in a Linux kernel, and a second as an NDIS hook driver on a Windows machine. Preliminary measurements illustrate that Beaver withstands severe DoS attacks without hampering the client-server communication. Moreover, Beaver is simple and easy to deploy. Schloss Dagstuhl – Leibniz-Zentrum für Informatik Gal Badishi and Idit Keidar and Amir Herzberg and Oleg Romanov and Avital Yachin 2007 Is Part Of Dagstuhl Seminar Proceedings, Volume 6371, From Security to Dependability (2007) InProceedings Text doc-type:ResearchArticle publishedVersion application/pdf doi:10.4230/DagSemProc.06371.4 urn:nbn:de:0030-drops-8492 https://drops.dagstuhl.de/entities/document/10.4230/DagSemProc.06371.4 eng https://creativecommons.org/licenses/by/4.0/legalcode