Tiered incentives for integrity based queuing

Fariba Khan; Carl A. Gunter

doi:10.1145/1879082.1879093

Tiered incentives for integrity based queuing

Research output: Contribution to conference › Paper

Abstract

We propose an tiered incentive system called Integrity-Based Queuing (IBQ) for protection against Internet Distributed Denial-of-Service (DDoS) attacks. Our proposal can be implemented step-by-step where each integrity improvement brings a direct benefit to the autonomous system making it. IBQ proposes preferential queuing based on integrity: good, bad and middle. Since implementation can rarely be complete or network-wide we provide incremental benefit by prioritizing service for domains with better integrity. We have provided a basic analysis to relate performance to measurable integrity of the client. We have designed the architecture for authentication, queuing and defense. We have tested IBQ for applications with real-time requirements and show how performance improves with higher assurance.

Original language	English (US)
DOIs	https://doi.org/10.1145/1879082.1879093
State	Published - Dec 1 2010
Event	2010 Workshop on the Economics of Networks, Systems, and Computation, NetEcon '10 - Vancouver, BC, Canada Duration: Oct 3 2010 → Oct 3 2010

Other

Other	2010 Workshop on the Economics of Networks, Systems, and Computation, NetEcon '10
Country	Canada
City	Vancouver, BC
Period	10/3/10 → 10/3/10

Fingerprint

ASJC Scopus subject areas

Computational Theory and Mathematics
Computer Networks and Communications

Cite this

Khan, F., & Gunter, C. A. (2010). Tiered incentives for integrity based queuing. Paper presented at 2010 Workshop on the Economics of Networks, Systems, and Computation, NetEcon '10, Vancouver, BC, Canada. https://doi.org/10.1145/1879082.1879093

@conference{661cc031c40047b1b0c33efb3478eac9,

title = "Tiered incentives for integrity based queuing",

abstract = "We propose an tiered incentive system called Integrity-Based Queuing (IBQ) for protection against Internet Distributed Denial-of-Service (DDoS) attacks. Our proposal can be implemented step-by-step where each integrity improvement brings a direct benefit to the autonomous system making it. IBQ proposes preferential queuing based on integrity: good, bad and middle. Since implementation can rarely be complete or network-wide we provide incremental benefit by prioritizing service for domains with better integrity. We have provided a basic analysis to relate performance to measurable integrity of the client. We have designed the architecture for authentication, queuing and defense. We have tested IBQ for applications with real-time requirements and show how performance improves with higher assurance.",

author = "Fariba Khan and Gunter, {Carl A.}",

year = "2010",

month = dec

day = "1",

doi = "10.1145/1879082.1879093",

language = "English (US)",

note = "2010 Workshop on the Economics of Networks, Systems, and Computation, NetEcon '10 ; Conference date: 03-10-2010 Through 03-10-2010",

}

TY - CONF

T1 - Tiered incentives for integrity based queuing

AU - Khan, Fariba

AU - Gunter, Carl A.

PY - 2010/12/1

Y1 - 2010/12/1

N2 - We propose an tiered incentive system called Integrity-Based Queuing (IBQ) for protection against Internet Distributed Denial-of-Service (DDoS) attacks. Our proposal can be implemented step-by-step where each integrity improvement brings a direct benefit to the autonomous system making it. IBQ proposes preferential queuing based on integrity: good, bad and middle. Since implementation can rarely be complete or network-wide we provide incremental benefit by prioritizing service for domains with better integrity. We have provided a basic analysis to relate performance to measurable integrity of the client. We have designed the architecture for authentication, queuing and defense. We have tested IBQ for applications with real-time requirements and show how performance improves with higher assurance.

AB - We propose an tiered incentive system called Integrity-Based Queuing (IBQ) for protection against Internet Distributed Denial-of-Service (DDoS) attacks. Our proposal can be implemented step-by-step where each integrity improvement brings a direct benefit to the autonomous system making it. IBQ proposes preferential queuing based on integrity: good, bad and middle. Since implementation can rarely be complete or network-wide we provide incremental benefit by prioritizing service for domains with better integrity. We have provided a basic analysis to relate performance to measurable integrity of the client. We have designed the architecture for authentication, queuing and defense. We have tested IBQ for applications with real-time requirements and show how performance improves with higher assurance.

UR - http://www.scopus.com/inward/record.url?scp=78650646593&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=78650646593&partnerID=8YFLogxK

U2 - 10.1145/1879082.1879093

DO - 10.1145/1879082.1879093

M3 - Paper

AN - SCOPUS:78650646593

T2 - 2010 Workshop on the Economics of Networks, Systems, and Computation, NetEcon '10

Y2 - 3 October 2010 through 3 October 2010

ER -

Access to Document

10.1145/1879082.1879093