The management of capabilities for Traffic Validation Architecture

摘要

The capabilities technique offers a new direction to defend against DDoS attacks. As a typical capabilities scheme, Traffic Validation Architecture (TVA) shows much good performances. However, the management of capabilities in TVA has not been fully taken into account and results in more difficult in actual deployment. So we propose a novel scheme based on index and the Least-Recently-Used (LRU) algorithm to manage the capabilities in TVA. In our scheme, the index was used to classify capabilities into different categories according to the length of capabilities. And then the LRU algorithm was operated in related categories. Theoretical and experimental results show that our scheme can optimize the overall searching performance for capabilities information and improve deplorability and efficiencies of TVA.