CCR Paper Comment, Discussion, and Update Forum: http://www.acm.org/sigcomm/CCR/forum Karthik Lakshminarayanan UC Berkeley Daniel Adkins UC Berkeley Adrian Perrig CMU Ion Stoica UC Berkeley Introduction One of the major problems faced by Internet hosts is denialof-service (DoS) caused by IP packet oods. Hosts in the Internet are unable to stop packets addressed to them. Once a host s network link becomes congested, IP routers respond to the overload by dropping packets arbitrarily. This is contrary to the goals of the host, which could respond more effectively to overload if it had control over which packets were dropped. For example, a host may reject new connections rather than accept excess load. A host running multiple services may give higher priority to some services than others (service differentiation). Also, a host may provide lower quality service rather than reject requests (service degradation). The main thesis of this paper is that hosts not the network should be given control to respond to packet oods and overload. Ideally, hosts should have ne-grained control over how routers process the packets addressed to them. For instance, hosts should be able to decide which packets to receive, which packets are dropped, and which packets
/lp/association-for-computing-machinery/taming-ip-packet-flooding-attacks-lXNoz0qOz2