4/8/2005

SOS: An Architecture For Mitigating DDoS Attacks

This paper descripes a technique that prevents DDOS attacks by introduces the concept of a virtual firewall.  The virtual firewall is
 contructed by have a set of secret nodes comunicating with a server that is being protected.  All communication to the protected server goes 
through the secure nodes.  Reaching the secret node is done through a chain of calls using a DHT ring.

A weekness of the this paper is that it does not describe how secret nodes can be established.  

Proof of concept was established through theortical analysis.