Proof-of-Work Mitigation Strategy for DNS-Based Amplification Attacks

Distributed Denial of Service attacks, and particularly DNS Amplification attacks, have seen a steady rise in deployment over the past few decades. DNS Amplification attacks, in particular, are challenging to identify and mitigate because of their apparent similarity to legitimate DNS traffic. This thesis proposes a new Proof-of-Work mitigation strategy that provides a defense against DNS Amplification attacks and shifts the burden of mitigation to the attackers. Through our experiments, we show that our Proof-of-Work strategy is effective in reversing the impact of DNS Amplification attacks on the victim’s ability to service legitimate clients. We also provide an evaluation framework to evaluate the mitigation strategy’s impact on the victim’s quality of service.

Name thesis:degree_name

Master

Department dc:contributor.department

Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science

Grantor dc:publisher

Massachusetts Institute of Technology

Year dc:date.issued

2025

Author dc:creator

• Bansal, Umang

Advisor dc:contributor.advisor

• Sollins, Karen R.

Statement dc:rights

• In Copyright - Educational Use Permitted
• Copyright retained by author(s)

Licence dc:rights.uri

• https://rightsstatements.org/page/InC-EDU/1.0/

Handle dc:identifier.uri

https://hdl.handle.net/1721.1/162514

OAI identifier oai:identifier

oai:dspace.mit.edu:1721.1/162514