Evaluation and design of cache replacement policies under flooding attacks

Martin Zadnik*, Marco Canini

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

A flow cache is a fundamental building block for flow-based traffic processing. Its efficiency is critical for the overall performance of a number of networked devices and systems. However, if not properly managed, the flow cache can be easily filled up and rendered ineffective by traffic patterns such as flooding attacks and scanning activities which, unfortunately, commonly occur in the Internet. In this paper, we show that popular cache replacement policies such as LRU cause the flow caches to evict the so called heavy-hitter flows during flooding attacks. To address this shortcoming, we build upon our recent work [1] and construct a replacement policy that is more resilient to floods and yet performs similarly to other policies under common network traffic conditions.

Original languageEnglish (US)
Title of host publicationIWCMC 2011 - 7th International Wireless Communications and Mobile Computing Conference
Pages1292-1297
Number of pages6
DOIs
StatePublished - 2011
Externally publishedYes
Event7th International Wireless Communications and Mobile Computing Conference, IWCMC 2011 - Istanbul, Turkey
Duration: Jul 4 2011Jul 8 2011

Other

Other7th International Wireless Communications and Mobile Computing Conference, IWCMC 2011
CountryTurkey
CityIstanbul
Period07/4/1107/8/11

Keywords

  • Cache replacement policies
  • Genetic Algorithms
  • Heavy-hitter flows

ASJC Scopus subject areas

  • Computer Networks and Communications
  • Communication

Fingerprint

Dive into the research topics of 'Evaluation and design of cache replacement policies under flooding attacks'. Together they form a unique fingerprint.

Cite this