Information Assurance

13.5. Responses to Specific Kinds of Attacks

This class of IRS is customized to respond to specific kinds of attacks, most commonly, DDoS attacks. There are scarce efforts at responses to other kinds of specialized attacks. One example is responding to internal attacks, where approaches proposed include changing the access control rules or dropping some connections when a high threat level is perceived [36]. However, such techniques so far have been human intensive and little exists in the literature in terms of rigorous validation of an automated system against different internal attacks. Hence, we focus on the DDoS attack response technology here.

DDoS attacks present a growing problem for network administrators around the world. On the Internet, ...