Abstract
We propose an tiered incentive system called Integrity-Based Queuing (IBQ) for protection against Internet Distributed Denial-of-Service (DDoS) attacks. Our proposal can be implemented step-by-step where each integrity improvement brings a direct benefit to the autonomous system making it. IBQ proposes preferential queuing based on integrity: good, bad and middle. Since implementation can rarely be complete or network-wide we provide incremental benefit by prioritizing service for domains with better integrity. We have provided a basic analysis to relate performance to measurable integrity of the client. We have designed the architecture for authentication, queuing and defense. We have tested IBQ for applications with real-time requirements and show how performance improves with higher assurance.
| Original language | English (US) |
|---|---|
| DOIs | |
| State | Published - Dec 1 2010 |
| Event | 2010 Workshop on the Economics of Networks, Systems, and Computation, NetEcon '10 - Vancouver, BC, Canada Duration: Oct 3 2010 → Oct 3 2010 |
Other
| Other | 2010 Workshop on the Economics of Networks, Systems, and Computation, NetEcon '10 |
|---|---|
| Country | Canada |
| City | Vancouver, BC |
| Period | 10/3/10 → 10/3/10 |
Fingerprint
ASJC Scopus subject areas
- Computational Theory and Mathematics
- Computer Networks and Communications
Cite this
Tiered incentives for integrity based queuing. / Khan, Fariba; Gunter, Carl A.
2010. Paper presented at 2010 Workshop on the Economics of Networks, Systems, and Computation, NetEcon '10, Vancouver, BC, Canada.Research output: Contribution to conference › Paper
}
TY - CONF
T1 - Tiered incentives for integrity based queuing
AU - Khan, Fariba
AU - Gunter, Carl A.
PY - 2010/12/1
Y1 - 2010/12/1
N2 - We propose an tiered incentive system called Integrity-Based Queuing (IBQ) for protection against Internet Distributed Denial-of-Service (DDoS) attacks. Our proposal can be implemented step-by-step where each integrity improvement brings a direct benefit to the autonomous system making it. IBQ proposes preferential queuing based on integrity: good, bad and middle. Since implementation can rarely be complete or network-wide we provide incremental benefit by prioritizing service for domains with better integrity. We have provided a basic analysis to relate performance to measurable integrity of the client. We have designed the architecture for authentication, queuing and defense. We have tested IBQ for applications with real-time requirements and show how performance improves with higher assurance.
AB - We propose an tiered incentive system called Integrity-Based Queuing (IBQ) for protection against Internet Distributed Denial-of-Service (DDoS) attacks. Our proposal can be implemented step-by-step where each integrity improvement brings a direct benefit to the autonomous system making it. IBQ proposes preferential queuing based on integrity: good, bad and middle. Since implementation can rarely be complete or network-wide we provide incremental benefit by prioritizing service for domains with better integrity. We have provided a basic analysis to relate performance to measurable integrity of the client. We have designed the architecture for authentication, queuing and defense. We have tested IBQ for applications with real-time requirements and show how performance improves with higher assurance.
UR - http://www.scopus.com/inward/record.url?scp=78650646593&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=78650646593&partnerID=8YFLogxK
U2 - 10.1145/1879082.1879093
DO - 10.1145/1879082.1879093
M3 - Paper
AN - SCOPUS:78650646593
ER -