1 Advanced Security Research Wes Hardaker Eric Monteith, Russ Mundy, Eric O’Brian, Ron Ostrenga, Dan Sterne, Roshan Thomas NAI Labs under contract to DARPA Designing a Test Bed for Evaluating DDoS Defense Research

2 Advanced Security Research Building a test environment to emulate the real world Designing a Test Bed for Evaluating DDoS Defense Research

3 Advanced Security Research October 12, 2001 Overview Today’s World Our Study and Goals Collecting Information The BOF Tonight Questions

4 Advanced Security Research October 12, 2001 Today’s World

5 Advanced Security Research October 12, 2001 Today’s DDoS World Them # = many You # = few Network = Complex

6 Advanced Security Research October 12, 2001 Today’s Research World Them # = few You # = 1 Network = Simple

7 Advanced Security Research October 12, 2001 A Huge Discrepancy The Real World Research/Validation Cost

8 Advanced Security Research October 12, 2001 The Middle Ground The Real World Research/Validation US

9 Advanced Security Research October 12, 2001 Study Goals Construction Specifications: –Possible Network Topologies –Equipment needs and costs –Connectivity to the real Internet –Staffing and administration

10 Advanced Security Research October 12, 2001 Study Goals Simulation and Usage Specifications: –Manually Launched attack using real DDoS tools –Capture and Replay of traffic –Traffic generation

11 Advanced Security Research October 12, 2001 We Need Help We are seeking input from: –Vendors –Large ISPs –Research Organizations –Government Organizations –Victim Sites –You!

12 Advanced Security Research October 12, 2001 We Need Your Help BOF Tonight –Requirement Discussion. –Solution Discussion. –Feedback from you.

13 Advanced Security Research October 12, 2001 Questions ?

14 Advanced Security Research October 12, 2001 Contact Us Project Team: Wes Hardaker: