Network Availability of Internet Services

One of the most compelling problems of the Internet is the lack of a comprehensive and unifying approach to dealing with service security and resilience. Although many such individual reliability mechanisms exist, no general set of policies or standards exists regarding how these mechanisms can be combined to achieve an overall robust state of security for the network. Network Availability for Internet Services: Threats and Defenses introduces solutions for defending against distributed denial of service (DDoS) attacks. This book proposes and evaluates practical mechanisms that will frustrate these attacks, and protect a wide range of services while maintaining or even improving their performance characteristics. The focus is on network-level faults and attacks. This book provides a practical end-to-end framework that significantly improves service availability and connectivity, without incurring a prohibitive deployment or performance cost. It also introduces and analyzes mechanisms that boost the security, resilience, and performance of network systems in a manner that is transparent to both the existing infrastructure and the end-users. Designed for advanced-level students in computer science as a secondary text or reference book, this book is also suitable for practitioners and researchers in industry, as well as the government and military.