Distributing network identity to mitigate denial-of-service attacks

Abstract

The CONTRA. Camouflage of Network Traffic to Resist Attacks, project was carried out by Draper Laboratory to provide a defense mechanism against distributed denial of service (DDoS) attacks to both prevent DDoS attacks and mitigate their effects. This Masters project looks at the CONTRA system and assesses its effectiveness. The goal of this project is to explore whether the techniques employed by CONTRA-nalnely IP dispersion. redundancy, and traffic masking, can effectively mitigate the effects of a DDoS attack. The analysis provides a set of recommendations for operating the CONTRA system to impede an outside attacker.