The PAADDoS project’s goal is to defend against large-scale Distributed Denial-of-Service (DDoS) attacks
by making anycast-based capacity more effective than it is today.
Anycast use Internet routing to associate users with geographically
close sites of a replicated service. During DDoS, anycast sites can
provide capacity to absorb an attack, and they can be used to isolate
the attack to part of the network.
We will work toward our goal of improving anycast use during DDoS by
(1) developing tools to map anycast catchments and baseline load,
(2) developing methods to plan changes and their effects on catchments,
and (3) developing tools to estimate attack load and assist anycast reconfiguration during an attack.
We expect these innovations
to improve service resilience in the face of DDoS attacks.
Our tools will improve anycast agility during an attack,
allowing capacity to be used effectively.
PAADDoS is a joint effort of the ANT Lab
involving USC/ISI (PI: John Heidemann)
and the Design and Analysis of Communication Systems group
at the University of Twente (PI: Aiko Pras).
PAADDoS also builds on our collaboration with SIDN Labs.
PAADDoS has websites at USC and U. Twente.
PAADDoS is supported by
the DHS HSARPA Cyber Security Division
via contract number
and by NWO.
Giovane C. M. Moura, John Heidemann, Wes Hardaker, Jeroen Bulten, Joao Ceron and Christian Hesselman 2020. Old but Gold: Prospecting TCP to Engineer DNS Anycast (extended). Technical Report ISI-TR-739b. USC/Information Sciences Institute.
ASM Rizvi, Joao Ceron, Leandro Bertholdo and John Heidemann 2020. Anycast Agility: Adaptive Routing to Manage DDoS. Technical Report arxiv:2006.14058v1. arXiv.
Lan Wei, Marcel Flores, Harkeerat Bedi and John Heidemann 2020. Bidirectional Anycast/Unicast Probing (BAUP):
Optimizing CDN Anycast. Proceedings of the IEEE Network Traffic Monitoring and Analysis Conference (Berlin, Germany, Jun. 2020).
John Heidemann, Wes Hardaker, Jelena Mirkovic, ASM Rizvi and Robert Story 2019. DDoS Defense in Depth for DNS (DDIDD). Invited talk at the Trusted CI Webinar.
ASM Rizvi, John Heidemann and Jelena Mirkovic 2019. Dynamically Selecting Defenses to DDoS for DNS (extended). Technical Report ISI-TR-736. USC/Information Sciences Institute.
Giovane C. M. Moura, John Heidemann, Ricardo de O. Schmidt and Wes Hardaker 2019. Cache Me If You Can: Effects of DNS Time-to-Live. Proceedings of the ACM Internet Measurement Conference (Amsterdam, the Netherlands, Oct. 2019), to appear.
Giovane C. M. Moura, John Heidemann, Ricardo de O. Schmidt and Wes Hardaker 2019. Cache Me If You Can: Effects of DNS Time-to-Live (extended). Technical Report ISI-TR-734b. USC/Information Sciences Institute.
For related publications, please see the
ANT publications web page.
See also the see the ANT distribution web page.
We make all datasets and specifically
our network outage datasets
through the LACANIC project.