Analysis of Linux Kernel Iptables for Mitigating DDOS Attacks; A Component-Based Approach

Abstract

Denial-of-Service (DoS) is a network security problem that constitutes a serious challenge to reliability of services deployed on the servers. DoS attacks aim is to exhaust a resource in the target system, reducing or completely subverting the availability of the service provided. Threat of DoS attacks has become even more severe with DDOS (Distributed Denial-of-Service) attacks. DDOS is an attempt by malicious users to carry out DoS attack indirectly with the help of many compromised computers on the Internet. Service providers are under mounting pressure to prevent, monitor and mitigate DoS/DDOS attacks directed towards their customers and their infrastructure. Defending against these types of attacks is not a trivial job, mainly due to the use of IP spoofing and the destination-based routing of the Internet. Literatures abound on DDOS attacks and mitigation strategies while many scholars attempt to demonstrate the effectiveness of one strategy against another. This paper however explores the Linux kernel firewall iptables, a defence-mechanism inherent in the Linux operating system capable of detecting intrusions and mitigating attacks. The paper is organized such that it presents the motivation for DDOS, various DDOS classifications and architecture, illustrates types of DDOS attacks and then extensively reviews iptables using a component based approach to show its efficient packet-filtering and analysis technique capable of mitigating DDOS attacks

Keywords

References