Tiered incentives for integrity based queuing

Fariba Khan, Carl A. Gunter

Research output: Contribution to conferencePaper

Abstract

We propose an tiered incentive system called Integrity-Based Queuing (IBQ) for protection against Internet Distributed Denial-of-Service (DDoS) attacks. Our proposal can be implemented step-by-step where each integrity improvement brings a direct benefit to the autonomous system making it. IBQ proposes preferential queuing based on integrity: good, bad and middle. Since implementation can rarely be complete or network-wide we provide incremental benefit by prioritizing service for domains with better integrity. We have provided a basic analysis to relate performance to measurable integrity of the client. We have designed the architecture for authentication, queuing and defense. We have tested IBQ for applications with real-time requirements and show how performance improves with higher assurance.

Original languageEnglish (US)
DOIs
StatePublished - Dec 1 2010
Event2010 Workshop on the Economics of Networks, Systems, and Computation, NetEcon '10 - Vancouver, BC, Canada
Duration: Oct 3 2010Oct 3 2010

Other

Other2010 Workshop on the Economics of Networks, Systems, and Computation, NetEcon '10
CountryCanada
CityVancouver, BC
Period10/3/1010/3/10

Fingerprint

Authentication
Internet
Denial-of-service attack

ASJC Scopus subject areas

  • Computational Theory and Mathematics
  • Computer Networks and Communications

Cite this

Khan, F., & Gunter, C. A. (2010). Tiered incentives for integrity based queuing. Paper presented at 2010 Workshop on the Economics of Networks, Systems, and Computation, NetEcon '10, Vancouver, BC, Canada. https://doi.org/10.1145/1879082.1879093

Tiered incentives for integrity based queuing. / Khan, Fariba; Gunter, Carl A.

2010. Paper presented at 2010 Workshop on the Economics of Networks, Systems, and Computation, NetEcon '10, Vancouver, BC, Canada.

Research output: Contribution to conferencePaper

Khan, F & Gunter, CA 2010, 'Tiered incentives for integrity based queuing', Paper presented at 2010 Workshop on the Economics of Networks, Systems, and Computation, NetEcon '10, Vancouver, BC, Canada, 10/3/10 - 10/3/10. https://doi.org/10.1145/1879082.1879093
Khan F, Gunter CA. Tiered incentives for integrity based queuing. 2010. Paper presented at 2010 Workshop on the Economics of Networks, Systems, and Computation, NetEcon '10, Vancouver, BC, Canada. https://doi.org/10.1145/1879082.1879093
Khan, Fariba ; Gunter, Carl A. / Tiered incentives for integrity based queuing. Paper presented at 2010 Workshop on the Economics of Networks, Systems, and Computation, NetEcon '10, Vancouver, BC, Canada.
@conference{661cc031c40047b1b0c33efb3478eac9,
title = "Tiered incentives for integrity based queuing",
abstract = "We propose an tiered incentive system called Integrity-Based Queuing (IBQ) for protection against Internet Distributed Denial-of-Service (DDoS) attacks. Our proposal can be implemented step-by-step where each integrity improvement brings a direct benefit to the autonomous system making it. IBQ proposes preferential queuing based on integrity: good, bad and middle. Since implementation can rarely be complete or network-wide we provide incremental benefit by prioritizing service for domains with better integrity. We have provided a basic analysis to relate performance to measurable integrity of the client. We have designed the architecture for authentication, queuing and defense. We have tested IBQ for applications with real-time requirements and show how performance improves with higher assurance.",
author = "Fariba Khan and Gunter, {Carl A.}",
year = "2010",
month = "12",
day = "1",
doi = "10.1145/1879082.1879093",
language = "English (US)",
note = "2010 Workshop on the Economics of Networks, Systems, and Computation, NetEcon '10 ; Conference date: 03-10-2010 Through 03-10-2010",

}

TY - CONF

T1 - Tiered incentives for integrity based queuing

AU - Khan, Fariba

AU - Gunter, Carl A.

PY - 2010/12/1

Y1 - 2010/12/1

N2 - We propose an tiered incentive system called Integrity-Based Queuing (IBQ) for protection against Internet Distributed Denial-of-Service (DDoS) attacks. Our proposal can be implemented step-by-step where each integrity improvement brings a direct benefit to the autonomous system making it. IBQ proposes preferential queuing based on integrity: good, bad and middle. Since implementation can rarely be complete or network-wide we provide incremental benefit by prioritizing service for domains with better integrity. We have provided a basic analysis to relate performance to measurable integrity of the client. We have designed the architecture for authentication, queuing and defense. We have tested IBQ for applications with real-time requirements and show how performance improves with higher assurance.

AB - We propose an tiered incentive system called Integrity-Based Queuing (IBQ) for protection against Internet Distributed Denial-of-Service (DDoS) attacks. Our proposal can be implemented step-by-step where each integrity improvement brings a direct benefit to the autonomous system making it. IBQ proposes preferential queuing based on integrity: good, bad and middle. Since implementation can rarely be complete or network-wide we provide incremental benefit by prioritizing service for domains with better integrity. We have provided a basic analysis to relate performance to measurable integrity of the client. We have designed the architecture for authentication, queuing and defense. We have tested IBQ for applications with real-time requirements and show how performance improves with higher assurance.

UR - http://www.scopus.com/inward/record.url?scp=78650646593&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=78650646593&partnerID=8YFLogxK

U2 - 10.1145/1879082.1879093

DO - 10.1145/1879082.1879093

M3 - Paper

AN - SCOPUS:78650646593

ER -