ForCES protocol design analysis for protection against DoS attacks

Abstract

This work discusses a design analysis for the protection of the ForCES protocol against denial of service (DoS) attacks, which is a key requirement for the ForCES protocol. In order to meet this requirement, the control and data messages in the protocol needs to be separated. The separation scheme consists of: (1) separating the congestion aware, control and data transport connections such as TCP connections and (2) gives higher priority for control. The design issues along with the experimental results are discussed.