Presentation 2015-11-07
A dynamic filtering method to reduce DDoS packets by using access tokens
Ryota Suzuki, Hikaru Morita,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) The flow controls on packets in transmission channel are general measures against DDoS (Distributed Denial of Service) attacks. However, since these measures cannot classify data packets as normal or attack, they impair functions of servers. This paper proposes access tokens included in IP headers. Since DDoS packets don't include the tokens, they are used to identify. In fact, the switch devices on the network are used to remove the DDoS packets. A white list that contain access tokens is distributed to the switch devices. If SDN (Software Defined Network) is adopted to the network, the white list can be dynamically renewed.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) DDoS attacks / white list / Packet filtering / SDN
Paper # ISEC2015-53,SITE2015-40,LOIS2015-47
Date of Issue 2015-10-30 (ISEC, SITE, LOIS)

Conference Information
Committee LOIS / ISEC / SITE
Conference Date 2015/11/6(2days)
Place (in Japanese) (See Japanese page)
Place (in English) Kanagawa Univ.
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair Manabu Okamoto(NTT) / Yukiyasu Tsunoo(NEC) / Noriaki Yoshikai(Nihon Univ.)
Vice Chair Hiroyuki Nishi(Sojo Univ.) / Masahiro Mambo(Kanazawa Univ.) / Kazuto Ogawa(NHK) / Hitoshi Okada(NII) / Tetsuya Morizumi(Toyo Networks & System Integration)
Secretary Hiroyuki Nishi(Tsuda College) / Masahiro Mambo(NTT) / Kazuto Ogawa(AIST) / Hitoshi Okada(Toshiba) / Tetsuya Morizumi(Shibaura Inst. of Tech.)
Assistant Yu Ichifuji(NII) / Tetsuya Izu(Fujitsu Lab.) / Takaaki Mizuki(Tohoku Univ.) / Noritaka Yamashita(NEC) / Takahiro Haga(Gifu Shotoku Gakuen Univ.)

Paper Information
Registration To Technical Committee on Life Intelligence and Office Information Systems / Technical Committee on Information Security / Technical Committee on Social Implications of Technology and Information Ethics
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) A dynamic filtering method to reduce DDoS packets by using access tokens
Sub Title (in English)
Keyword(1) DDoS attacks
Keyword(2) white list
Keyword(3) Packet filtering
Keyword(4) SDN
1st Author's Name Ryota Suzuki
1st Author's Affiliation Kanagawa University(Kanagawa Univ.)
2nd Author's Name Hikaru Morita
2nd Author's Affiliation Kanagawa University(Kanagawa Univ.)
Date 2015-11-07
Paper # ISEC2015-53,SITE2015-40,LOIS2015-47
Volume (vol) vol.115
Number (no) ISEC-293,SITE-294,LOIS-295
Page pp.pp.111-116(ISEC), pp.111-116(SITE), pp.111-116(LOIS),
#Pages 6
Date of Issue 2015-10-30 (ISEC, SITE, LOIS)