A NETWORK INDEPENDENT TECHNIQUE FOR DEFENSE AGAINST DDOS ATTACK IN GRID ENVIRONMENT

Abstract

Grid is an upcoming technology that promises performance, processing power and resources at cheap prices. But as the uses of Grid are proliferating, security in the Grid Environment is becoming challenging. The Most common attack on a Grid is the Distributed Denial of Service (DDoS) Attack. The DDoS attacks have always been a major threat in Grid Environment because along with IP spoofing they are hard to defend against. Most methods for prevention against DDoS attacks are network dependent and require the Network Routing information or router support, or coordination among routers and networks. In a Grid consisting of various virtual organizations and networks these methods maybe difficult or might be impossible to use and execute because of policy issues between various organizations and communities. Based on this observation, this dissertation report presents a network independent technique based on Hop Count Filtering for defense against DDoS attacks in Grid Environment. It does not require any router support and hence is readily deployable and doesn't require any changes to the present network structure.