DoS Attack Prevention Using the Static Window Flow Control in Sequent Connected Devices

Abstract

This article presents the model of the lossless network system with an input flow control regulator. The regulator uses a static window flow control algorithm to cut out of band data. The system consists of sequent connected devices, and the feedback to the regulator is provided from each device in the chain. This provides adaptive control algorithm implementation taking into account the buffer overflow in separate parts of the system. Limiting the input flow is a defense measure against denial of service (DoS) attacks. This algorithm is especially well for brute force kind of DoS attack. They don't use information about the internal structure of the attacked system. The model uses the Network Calculus approach for simulation of the regulator and computing the main characteristics of the system.