Extensible Security Services On The CROSS Software-Programmable Router

Oct 24, 2001

Abstract

will describe the CROSS software-programmable router platform, and example network security services being developed on the system. I will first discuss the CROSS router architecture, which allows value-added processing of network flows to have guaranteed access to diverse system resources.

As an exmaple service, I will present a network architecture and accompanying algorithms for countering distributed denial-of-service (DDoS) attacks directed at an Internet server. I will propose a notion of level-$k$ max-min fairness to allocate the server capacity among a set of defense routers. Simulation results illustrate the performance of the proposed solution.