Skip to main content
USENIX
  • Conferences
  • Students
Sign in

connect with us


  •  Twitter
  •  Facebook
  •  LinkedIn
  •  Google+
  •  YouTube

twitter

Tweets by @usenix

usenix conference policies

  • Event Code of Conduct
  • Conference Network Policy
  • Statement on Environmental Responsibility Policy

You are here

Home ยป Defending Against Denial of Service Attacks in Scout
Tweet

connect with us

Defending Against Denial of Service Attacks in Scout

Abstract: 

We describe a two-dimensional architecture for defending against denial of service attacks. In one dimension, the architecture accounts for all resources consumed by each I/O path in the system; this accounting mechanism is implemented as an extension to the path object in the Scout operating system. In the second dimension, the various modules that define each path can be configured in separate protection domains; we implement hardware enforced protection domains, although other implementations are possible. The resulting system---which we call Escort---is the first example of a system that simultaneously does end-to-end resource accounting (thereby protecting against resource based denial of service attacks where principals can be identified) and supports multiple protection domains (thereby allowing untrusted modules to be isolated from each other). The paper describes the Escort architecture and its implementation in Scout, and reports a collection of experiments that measure the costs and benefits of using Escort to protect a web server from denial of service attacks.

Oliver Spatscheck, University of Arizona

Larry L. Peterson, Princeton University

BibTeX
@inproceedings {271785,
author = {Oliver Spatscheck and Larry L. Peterson},
title = {Defending Against Denial of Service Attacks in Scout},
booktitle = {3rd Symposium on Operating Systems Design and Implementation (OSDI 99)},
year = {1999},
address = {New Orleans, LA},
url = {https://www.usenix.org/conference/osdi-99/defending-against-denial-service-attacks-scout},
publisher = {USENIX Association},
month = feb,
}
Download

Links

Paper: 
http://usenix.org/publications/library/proceedings/osdi99/full_papers/spatscheck/spatscheck.pdf
Paper (HTML): 
http://usenix.org/publications/library/proceedings/osdi99/full_papers/spatscheck/spatscheck_html/spatscheck.html
  • Log in or    Register to post comments

© USENIX

  • Privacy Policy
  • Contact Us