Defending Against DDoS Attacks in Bloom Filter based Multicasting

TL;DR

This paper investigates security vulnerabilities of Bloom filter-based multicast forwarding, focusing on DDoS attack patterns, especially in destination-oriented approaches and data center networks, revealing previously unstudied attack methods.

Contribution

It provides the first analysis of DDoS vulnerabilities in destination-oriented Bloom filter multicast, identifying new attack patterns and security issues.

Findings

Identified new DDoS attack patterns against Bloom filter multicast

Analyzed security issues in data center network contexts

Revealed vulnerabilities in destination-oriented approaches

Abstract

This paper analyze security issues of Bloom filter based multicast forwarding mechanisms. Tree oriented approaches and destination oriented approaches are studied. We analyze the possible distributed denail of service (DDoS) against the Bloom filter based multicast with the destination oriented approach, which has never been analyzed before. We reveal some attack patterns that have not been studied in the literature. We also analyze the possible DDoS attacks against Bloom filter based multicast in the DCN context.