Detail publikace

Evaluation and Design of Cache Replacement Policies under Flooding Attacks

Originální název

Evaluation and Design of Cache Replacement Policies under Flooding Attacks

Anglický název

Evaluation and Design of Cache Replacement Policies under Flooding Attacks

Jazyk

en

Originální abstrakt

A flow cache is a fundamental building block for flow-based traffic processing. Its efficiency is critical for the overall performance of a number of networked devices and systems. However, if not properly managed, the flow cache can be easily filled up and rendered ineffective by traffic patterns such as flooding attacks and scanning activities which, unfortunately, commonly occur in the Internet. In this paper, we show that popular cache replacement policies such as LRU cause the flow caches to evict the so called heavyhitter flows during flooding attacks. To address this shortcoming, we build upon our recent work and construct a replacement policy that is more resilient to floods and yet performs similarly to other policies under common network traffic conditions.

Anglický abstrakt

A flow cache is a fundamental building block for flow-based traffic processing. Its efficiency is critical for the overall performance of a number of networked devices and systems. However, if not properly managed, the flow cache can be easily filled up and rendered ineffective by traffic patterns such as flooding attacks and scanning activities which, unfortunately, commonly occur in the Internet. In this paper, we show that popular cache replacement policies such as LRU cause the flow caches to evict the so called heavyhitter flows during flooding attacks. To address this shortcoming, we build upon our recent work and construct a replacement policy that is more resilient to floods and yet performs similarly to other policies under common network traffic conditions.

BibTex


@inproceedings{BUT76433,
  author="Martin {Žádník} and Marco {Canini}",
  title="Evaluation and Design of Cache Replacement Policies under Flooding Attacks",
  annote="A flow cache is a fundamental building block for
flow-based traffic processing. Its efficiency is critical for the
overall performance of a number of networked devices and
systems. However, if not properly managed, the flow cache can be
easily filled up and rendered ineffective by traffic patterns such
as flooding attacks and scanning activities which, unfortunately,
commonly occur in the Internet.
In this paper, we show that popular cache replacement policies
such as LRU cause the flow caches to evict the so called heavyhitter
flows during flooding attacks. To address this shortcoming,
we build upon our recent work and construct a replacement
policy that is more resilient to floods and yet performs similarly
to other policies under common network traffic conditions.",
  address="IEEE Computer Society",
  booktitle="Proceedings of the 7th International Wireless Communications and Mobile Computing Conference",
  chapter="76433",
  doi="10.1109/IWCMC.2011.5982726",
  edition="NEUVEDEN",
  howpublished="online",
  institution="IEEE Computer Society",
  year="2011",
  month="july",
  pages="1292--1297",
  publisher="IEEE Computer Society",
  type="conference paper"
}