2. Preventing denial-of-service attacks

2.1 Different protection phases

Since denial-of-service attacks are a major risk for any equipment connected to the Internet, it is important to implement techniques in the network to limit the ability of attackers to carry out these attacks. These protection techniques can serve one (or more) of the following purposes:

• prevent address spoofing ;

• find the identity of equipment generating attack traffic by tracing packets, flows or aggregates of flows in the network;

• control the bandwidth allocated to streams or aggregates of streams ;

• detect resource starvation and overbooking;

• eliminate clearly dangerous...