TCP - IP White Papers
Low-Rate TCP-Targeted Denial of Service Attacks
Overview Denial of Service attacks are presenting an increasing threat to the global inter-networking infrastructure. While TCP's congestion control algorithm is highly robust to diverse network conditions, its implicit assumption of end-system cooperation results in a wellknown vulnerability to attack by high-rate non-responsive flows. In this paper, this paper investigates a class of low-rate denial of service attacks which, unlike high-rate attacks, are difficult for routers and counter-DoS mechanisms to detect. Using a combination of analytical modeling, simulations, and Internet experiments, it shows that maliciously chosen low-rate DoS traffic patterns that exploit TCP's retransmission time-out mechanism can throttle TCP flows to a small fraction of their ideal rate while eluding detection.
| Publisher | Association for Computing Machinery | File Format | |
|---|---|---|---|
| Date Published | August 2003 | ||
| Format | White Papers | ||
| Topics | |||



