2003 Articles
Using Graphic Turing Tests To Counter Automated DDoS Attacks Against Web Servers
We present WebSOS, a novel overlay-based architecture that provides guaranteed access to a web server that is targeted by a denial of service (DoS) attack. Our approach exploits two key characteristics of the web environment: its design around a human-centric interface, and the extensibility inherent in many browsers through downloadable "applets." We guarantee access to a web server for a large number of previously unknown users, without requiring pre-existing trust relationships between users and the system.Our prototype requires no modifications to either servers or browsers, and makes use of graphical Turing tests, web proxies, and client authentication using the SSL/TLS protocol, all readily supported by modern browsers. We use the WebSOS prototype to conduct a performance evaluation over the Internet using PlanetLab, a testbed for experimentation with network overlays. We determine the end-to-end latency using both a Chord-based approach and our shortcut extension. Our evaluation shows the latency increase by a factor of 7 and 2 respectively, confirming our simulation results.
Subjects
Files
- GraphicTuringTests.pdf application/pdf 177 KB Download File
Also Published In
- Title
- Proceedings of the 10th ACM Conference on Computer and Communications Security:
CCS 2003: October 27-31, 2003, Washington, DC, USA - Publisher
- ACM Press
- DOI
- https://doi.org/10.1145/948109.948114
More About This Work
- Academic Units
- Computer Science
- Published Here
- July 5, 2012