^ Top

NANOG Meeting Presentation Abstract

Blackholing at IXPs: On the Effectiveness of DDoS Mitigation in the Wild
Meeting: NANOG67
Date / Time: 2016-06-14 5:00pm - 5:30pm
This item is webcast
Room: Imperial Ballroom (B2 Level)
Presenters: Speakers:

Christoph Dietzel, DE-CIX / TU Berlin

Since June 2014, Christoph Dietzel is member of the DE-CIX Research and Development team and responsible for several research efforts and also involved in numerous projects funded by the public sector (EU, German Federal Ministries). Moreover, he is a PhD student in the INET group, advised by Anja Feldmann at TU Berlin, since the end of 2014. His ongoing research interests focus on Internet measurements & security, routing, and traffic classification. Chris is also highly interested in IXP-related aspects of the Internet ecosystem. Prior to his work at DE-CIX and his PhD studies he received BSc and MSc degrees in computer science from the Darmstadt University of Applied Sciences. Alongside his studies, Chris was employed by the Fraunhofer SIT and CASED as a student research assistant. In 2013, Christoph Dietzel was granted a scholarship to conduct research and study at the UMass (USA). In cooperation with Siemens CERT, he worked on dynamic malware analysis for Android in fulfillment of his Master’s Thesis.
Abstract: DDoS attacks remain a serious threat not only to the edge of the
Internet but also to the core peering links at Internet Exchange Points.
Blackholing at IXPs is an operational technique that allows a peer to
announce a prefix via BGP to another peer, which then discards traffic
destined for this prefix. However, as far as we know there is only
anecdotal evidence of the success of blackholing. In this talk, we shed
light on the extent to which blackholing is used by the IXP members and
its impact on traffic, e.g., volumes or patterns. Within a 12 week
period we found that traffic to more than 7,864 distinct IP prefixes was
blackholed by 75 ASes. The daily patterns emphasize that there are not
only a highly variable number of new announcements every day but,
surprisingly, there is a consistently high number of announcements
> 1000. Moreover, we highlight case studies in which blackholing succeeds
in reducing the DDoS attack traffic. In addition we briefly present the
current state of blackholing standardization within the IETF.
Files: youtubeBlackholing at IXPs: On the Effectiveness of DDoS Mitigation in the Wild
pdfDietzel_Blackholing (PDF)
Sponsors: None.

Back to NANOG67 agenda.

NANOG67 Abstracts

  • Conference Opening
    Moderators:
    Daniel Golding, NANOG Board, Google; Speakers:
    Peter JacobyRCN; .
    L Sean Kennedy, XO Communications; Don MacNeilJay Borkenhagen.
  • Conference Opening
    Moderators:
    Daniel Golding, NANOG Board, Google; Speakers:
    Peter JacobyRCN; .
    L Sean Kennedy, XO Communications; Don MacNeilJay Borkenhagen.
  • Conference Opening
    Moderators:
    Daniel Golding, NANOG Board, Google; Speakers:
    Peter JacobyRCN; .
    L Sean Kennedy, XO Communications; Don MacNeilJay Borkenhagen.
  • Conference Opening
    Moderators:
    Daniel Golding, NANOG Board, Google; Speakers:
    Peter JacobyRCN; .
    L Sean Kennedy, XO Communications; Don MacNeilJay Borkenhagen.
  • Conference Opening
    Moderators:
    Daniel Golding, NANOG Board, Google; Speakers:
    Peter JacobyRCN; .
    L Sean Kennedy, XO Communications; Don MacNeilJay Borkenhagen.
  • DNS Track
    Speakers:
    edward lewisICANN; .
    Duane Wessels, Verisign; Kazunori FujiwaraJPRS; .
    Casey Deccio, Verisign Labs; Yacin Nadji.
  • DNS Track
    Speakers:
    edward lewisICANN; .
    Duane Wessels, Verisign; Kazunori FujiwaraJPRS; .
    Casey Deccio, Verisign Labs; Yacin Nadji.
  • DNS Track
    Speakers:
    edward lewisICANN; .
    Duane Wessels, Verisign; Kazunori FujiwaraJPRS; .
    Casey Deccio, Verisign Labs; Yacin Nadji.
  • DNS Track
    Speakers:
    edward lewisICANN; .
    Duane Wessels, Verisign; Kazunori FujiwaraJPRS; .
    Casey Deccio, Verisign Labs; Yacin Nadji.
  • DNS Track
    Speakers:
    edward lewisICANN; .
    Duane Wessels, Verisign; Kazunori FujiwaraJPRS; .
    Casey Deccio, Verisign Labs; Yacin Nadji.
  • Security Track
    Speakers:
    John Kristoff, DePaul University; Christoph Dietzel.
    Ryan Haley.
    Jelena Mirkovic.
  • Security Track
    Speakers:
    John Kristoff, DePaul University; Christoph Dietzel.
    Ryan Haley.
    Jelena Mirkovic.
  • Security Track
    Speakers:
    John Kristoff, DePaul University; Christoph Dietzel.
    Ryan Haley.
    Jelena Mirkovic.
  • Security Track
    Speakers:
    John Kristoff, DePaul University; Christoph Dietzel.
    Ryan Haley.
    Jelena Mirkovic.

 
^ Back to Top