Presentation 2017-03-03
Attack Blocking Method on Autonomous and Distributed Security Infrastructure for the Internet
Hiroyuki Kimiyama, Ken Eguchi, Tomoaki Tsutsumi, Kaori Sano, Hirohumi Yamaki, Yoichiro Ueno, Naoki Yonesaki, Ryoichi Sasaki, Hiroshi Kobayashi,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) Cyber attacks on network connected equipment, such as servers, PCs, IoTs and so on, will never be ended. Over 600Gbit/s traffic to single server was observed during recent DDoS attack so it is hard to protect them by existing end-point security method. Therefore, we proposed "Autonomous and distributed Internet security (AIS) infrastructure" to protect them by all Internet Providers. We also proposed Multi-layer binding router (MLBR) which works as adaptive firewall to shut down malicious packets coming from and going to external networks for AIS infrastructure. The MLBR also shut down malicious packets which are requested from endpoint equipment to drop and which has forged source IP addresses by using uRPF like function. In this report, we describe the outline of AIS infrastructure and method to shut down malicious packets using the MLBRs.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) Cyber attack / DDoS attack / Adaptive firewall / Multi-layer binding router
Paper # NS2016-251
Date of Issue 2017-02-23 (NS)

Conference Information
Committee NS / IN
Conference Date 2017/3/2(2days)
Place (in Japanese) (See Japanese page)
Place (in English) OKINAWA ZANPAMISAKI ROYAL HOTEL
Topics (in Japanese) (See Japanese page)
Topics (in English) General
Chair Hideki Tode(Osaka Pref. Univ.) / Katsunori Yamaoka(Tokyo Inst. of Tech.)
Vice Chair Yoshikatsu Okazaki(NTT) / Takuji Kishida(NTT)
Secretary Yoshikatsu Okazaki(Kyushu Inst. of Tech.) / Takuji Kishida(NTT)
Assistant Shohei Kamamura(NTT) / Kunitake Kaneko(Keio Univ.) / Takashi Natsume(NTT)

Paper Information
Registration To Technical Committee on Network Systems / Technical Committee on Information Networks
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) Attack Blocking Method on Autonomous and Distributed Security Infrastructure for the Internet
Sub Title (in English)
Keyword(1) Cyber attack
Keyword(2) DDoS attack
Keyword(3) Adaptive firewall
Keyword(4) Multi-layer binding router
1st Author's Name Hiroyuki Kimiyama
1st Author's Affiliation Tokyo Denki University(Tokyo Denki Univ.)
2nd Author's Name Ken Eguchi
2nd Author's Affiliation Tokyo Denki University(Tokyo Denki Univ.)
3rd Author's Name Tomoaki Tsutsumi
3rd Author's Affiliation Tokyo Denki University(Tokyo Denki Univ.)
4th Author's Name Kaori Sano
4th Author's Affiliation Tokyo Denki University(Tokyo Denki Univ.)
5th Author's Name Hirohumi Yamaki
5th Author's Affiliation Tokyo Denki University(Tokyo Denki Univ.)
6th Author's Name Yoichiro Ueno
6th Author's Affiliation Tokyo Denki University(Tokyo Denki Univ.)
7th Author's Name Naoki Yonesaki
7th Author's Affiliation Tokyo Denki University(Tokyo Denki Univ.)
8th Author's Name Ryoichi Sasaki
8th Author's Affiliation Tokyo Denki University(Tokyo Denki Univ.)
9th Author's Name Hiroshi Kobayashi
9th Author's Affiliation Tokyo Denki University(Tokyo Denki Univ.)
Date 2017-03-03
Paper # NS2016-251
Volume (vol) vol.116
Number (no) NS-484
Page pp.pp.541-546(NS),
#Pages 6
Date of Issue 2017-02-23 (NS)