one more paper idea
Tom Anderson (tom@emigrant)
Mon, 28 Sep 1998 09:52:18 -0700 (PDT)
No less than 3 papers were submitted to OSDI on preventing
denial of service on a web server, by careful accounting of
OS resources. This only solves part of the problem -- there are
lots of ways of causing end to end denial of service, by attacking
the routers leading up to the web server (e.g., don't obey congestion
control!) Even if the packets are discarded at the web server,
the damage will be done.
I think we know how to fix this -- it requires the ability
to push parts of the web server resource allocation code out into the
network, to control routing and buffer allocation.
tom