PATRICIA: Passive and Active Traffic Regulation Infrastructure using Covered IP Addresses

The increasing feasibility of launching large-scale network attacks poses serious threats to the Internet. We propose the framework PATRICIA to eliminate and throttle possibly undesirable traffic generated by malicious or mischievous users. In the proposed scheme, any data transmissions to protected hosts must be approved by a designated traffic regulator located in the edge network, and data packets are verified by routers for maximum protection. In addition, PATRICIA protects legitimate control traffic against DoS attacks and minimizes collusion among attackers.

Publications and Posters

• L. Wang, Q. Wu, D. D. Luong, DEngaging Edge Networks in Preventing and Mitigating Undesirable Network Traffic, in Proceedings of 3rd Workshop on Secure Network Protocols (NPSEC) in conjunction with IEEE ICNP, Beijing, China, Oct. 2007