1. Explore the use of multiple gateways for intrusion detection defense Sunil Bhave & Sonali Patankar CS526 Fall 2002

2. Problem Definition In case of a DDOS attack, evaluate the available solutions, see if we can use multiple routers to a better solution. Explore ideas for new solution.

3. Terms in Intrusion Detection Risk Vulnerability Attack Penetration External Intruder Internal Intruder masquerade as another user clandestine intruders

4. Misconceptions If I have Firewall, I don’t need IDS If my system is not protected, I can not harm other systems

5. Typical DDOS Attack Victim Router Victim Site Agent Attacker

6. Countermeasures to DDOS Reroute the DNS entry to another address ( not great) Filtering

7. Possible Solutions Become a good Netizen, Protect yourself from becoming an accessory to attack Use more than one router Selective rerouting