Robust random early detection: Difference between revisions

Revision as of 11:37, 4 June 2020

Latest revision as of 13:38, 7 January 2024

(5 intermediate revisions by 4 users not shown)

Line 1:

'''Robust random early detection''' ('''RRED''') is a queueing disclipinediscipline for a [[network scheduler]]. The existing [[random early detection]] (RED) algorithm and its variants are found vulnerable to emerging attacks, especially the [[Denial-of-service attack#Low-rate Denial-of-Service attacks|Low-rate Denial-of-Service attack]]s (LDoS). Experiments have confirmed that the existing RED-like algorithms are notably vulnerable under LDoS attacks due to the oscillating TCP queue size caused by the attacks.<ref name=RRED>{{Cite journal | last1 = Zhang | first1 = C. | last2 = Yin | first2 = J. | last3 = Cai | first3 = Z. | last4 = Chen | first4 = W. | title = RRED: Robust RED algorithm to counter low-rate denial-of-service attacks | doi = 10.1109/LCOMM.2010.05.091407 | journal = [[IEEE Communications Letters]] | volume = 14 | issue = 5 | pages = 489–491 | date=May 2010 | pmids2cid = | pmc =1121461 | url = https://sites.google.com/site/cwzhangres/home/files/RREDRobustREDAlgorithmtoCounterLow-rateDenial-of-ServiceAttacks.pdf?attredirects=0}}</ref>

The Robust RED (RRED) algorithm was proposed to improve the TCP throughput against LDoS attacks. The basic idea behind the RRED is to detect and filter out attack packets before a normal RED algorithm is applied to incoming flows. RRED algorithm can significantly improve the performance of TCP under Low-rate denial-of-service attacks.<ref name="RRED"/>

Line 17:

06 increase local indicator by 1 for each bin of f

07 Flow[f].I ← maximum of local indicators from bins of f

08 '''if''' Flow[f].I >=≥ 0 '''then'''

09 RED-ENQUE(pkt) // pass pkt to the RED block

10 '''if''' RED drops pkt '''then'''

11 T2 ← pkt.arrivaltime

12 '''else'''

Line 39:

*[http://sites.google.com/site/cwzhangres/home/posts/aqmdossimulationplatform AQM&DoS Simulation Platform]

*[http://sites.google.com/site/cwzhangres/home/posts/recentpublicationsinlow-ratedosattacks Recent Publications in Low-rate Denial-of-Service (LDoS) attacks ]

*[http://sites.google.com/site/cwzhangres/home/posts/recentpublicationsinrandomearlydetectionredschemes Recent Publications in Random Early Detection (RED) schemes] {{Webarchive|url=https://web.archive.org/web/20160917055738/http://sites.google.com/site/cwzhangres/home/posts/recentpublicationsinrandomearlydetectionredschemes |date=2016-09-17 }}

*[http://sites.google.com/site/cwzhangres/home/posts/recentpublicationsinactivequeuemanagementaqmschemes Recent Publications in Active Queue Management (AQM) schemes]