Pushback against DDOS Attacks

Posted by CmdrTaco on Sunday October 27, 2002 @01:49AM from the build-a-better-asshole-trap dept.

Huusker writes "Steven Bellovin and others at ATT Research Labs and ICIR have come up with mechanism to stop DDOS attacks. The idea is called Pushback. When the routers get flooded they consult a Unix daemon (/etc/pushbackd) to determine if they are being DDOS'ed. The routers propagate the quench packets back to the sources. The policy and propagation are separate, allowing hardware vendors to concentrate on the quench protocol while the white hats invent ever more clever DDOS detection filters for /etc/pushbackd. The authors of the paper have an initial implementation on FreeBSD."

1 of 159 comments (clear)

You're still putting daemons in /etc? by your+f*cking+mother · 2002-10-27 03:18 · Score: 0, Troll

Come on, kids. It's not the 80s anymore (though, I'm willing to bet the guys at AT&T Research labs aren't kids, and they actually might remember when /etc was the best place to put those things... but it's not anymore... especially not on freebsd!