{"id":{"repo_id":"uiuc","oai_identifier":"oai:www.ideals.illinois.edu:2142/105060"},"canonical_url":"https://search.dev.ndltd.org/etd/uiuc/oai:www.ideals.illinois.edu:2142/105060","repository":{"repo_id":"uiuc","name":"University of Illinois - Urbana-Champaign","base_url":"https://www.ideals.illinois.edu/oai-pmh"},"display":{"title":"Inter-middlepolice coordination framework and co-bottleneck detection","abstract":"DSpace SAF Submission Ingestion Package generated from Vireo submission #13760 on 2019-08-22 at 15:07:25","abstract_html":"DSpace SAF Submission Ingestion Package generated from Vireo submission #13760 on 2019-08-22 at 15:07:25","abstract_has_math":false,"creators":["Li, Yifei"],"institution":"University of Illinois at Urbana-Champaign","degree_name":"M.S.","degree_level":"Thesis","degree_discipline":"Electrical & Computer Engr","degree_department":null,"school":null,"contributors":["Hu, Yih-Chun"],"advisors":[],"committee_chairs":[],"committee_members":[],"year":2019,"date_issued":"2019-08-23T20:36:03Z","date_published":"2019-08-23T20:36:03Z","updated_at":"2026-07-22T22:24:44Z","subjects":["DDoS Mitigation, Computer Network, Distributed System, Cloud Computing"],"languages":["en"],"rights":["Copyright 2019 Yifei Li"],"rights_urls":[],"identifier_entries":[]},"links":{"outbound_url":"http://hdl.handle.net/2142/105060","outbound_label":"Handle","outbound_source":"dc:identifier"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor","label":"Contributor","values":["Hu, Yih-Chun"]},{"key":"dc:creator","label":"Author","values":["Li, Yifei"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date","label":"Dc Date","values":["2019-08-23T20:36:03Z","2021-08-24T09:15:38Z","2019-04-19","2019-05"]},{"key":"dc:type","label":"Dc Type","values":["text"]},{"key":"thesis:degree_discipline","label":"Discipline","values":["Electrical & Computer Engr"]},{"key":"thesis:degree_level","label":"Degree Level","values":["Thesis"]},{"key":"thesis:degree_name","label":"Degree Name","values":["M.S."]},{"key":"thesis:institution_name","label":"Thesis Institution Name","values":["University of Illinois at Urbana-Champaign"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["DDoS Mitigation, Computer Network, Distributed System, Cloud Computing"]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language","label":"Dc Language","values":["en"]},{"key":"dc:rights","label":"Dc Rights","values":["Copyright 2019 Yifei Li"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier","label":"Identifier","values":["http://hdl.handle.net/2142/105060"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description","label":"Description","values":["DSpace SAF Submission Ingestion Package generated from Vireo submission #13760 on 2019-08-22 at 15:07:25","Over the decades, with the prevalence of advanced computer networks, the problem of denial of service (DDoS) attack has become more serious. In the past years, many approaches have been proposed to mitigate DDoS attacks, but only a few have really tackled the challenge. The prior work of MiddlePolice presents a practical solution to enforce end-to-end policy in the middle of the Internet. It detects the capability of the downstream link by constantly observing flow congestion. Rate limiting can be further applied to flows that exceed the given capability. The MiddlePolice requires lightweight deployment at network devices but is capable of thwarting thousands of attack flows. The major defensive mechanism of MiddlePolice could easily suppress attacking traffic at a network router, thus enforcing sender fairness at the endpoint. However, to enforce global per-sender fairness, MiddlePolice shares congestion observations when it shares the downstream bottleneck with peers, which can potentially pollute the statistics collected. This thesis is a continuation of the original MiddlePolice project to complete the design. We propose a framework and a methodology to perform inter-middlepolice coordination on a cloud scale. We demonstrate the effectiveness of the inter-middlepolice coordination mechanism through detailed implementation and thorough evaluation. Further, we show that the proposed improvements preserve all principles of original MiddlePolice design and offer a more complete yet equally effective solution to modern computer networks and security applications.","Submission published under a 24 month embargo labeled 'U of I Access', the embargo will last until 2021-05-01","The student, Yifei Li, accepted the attached license on 2019-04-18 at 17:17.","The student, Yifei Li, submitted this Thesis for approval on 2019-04-18 at 17:22.","This Thesis was approved for publication on 2019-04-19 at 16:09.","Made available in DSpace on 2019-08-23T20:36:03Z (GMT). No. of bitstreams: 2 LI-THESIS-2019.pdf: 1312170 bytes, checksum: cc07b2bfedd5610657df005818c02874 (MD5) LICENSE.txt: 4205 bytes, checksum: d71036ad5f3fa34bd6a4399072c232ed (MD5) Previous issue date: 2019-04-19","Embargo set by: Seth Robbins for item 112179 Lift date: 2021-08-23T20:36:18Z Reason: Author requested U of Illinois access only (OA after 2yrs) in Vireo ETD system","U of I Only Restriction Lifted for Item 112179 on 2021-08-24T09:15:38Z."]},{"key":"dc:format","label":"Dc Format","values":["application/pdf"]},{"key":"dc:title","label":"Title","values":["Inter-middlepolice coordination framework and co-bottleneck detection"]}]}],"canonical_facts":{"dc:contributor":["Hu, Yih-Chun"],"dc:creator":["Li, Yifei"],"dc:date":["2019-08-23T20:36:03Z","2021-08-24T09:15:38Z","2019-04-19","2019-05"],"dc:description":["DSpace SAF Submission Ingestion Package generated from Vireo submission #13760 on 2019-08-22 at 15:07:25","Over the decades, with the prevalence of advanced computer networks, the problem of denial of service (DDoS) attack has become more serious. In the past years, many approaches have been proposed to mitigate DDoS attacks, but only a few have really tackled the challenge. The prior work of MiddlePolice presents a practical solution to enforce end-to-end policy in the middle of the Internet. It detects the capability of the downstream link by constantly observing flow congestion. Rate limiting can be further applied to flows that exceed the given capability. The MiddlePolice requires lightweight deployment at network devices but is capable of thwarting thousands of attack flows. The major defensive mechanism of MiddlePolice could easily suppress attacking traffic at a network router, thus enforcing sender fairness at the endpoint. However, to enforce global per-sender fairness, MiddlePolice shares congestion observations when it shares the downstream bottleneck with peers, which can potentially pollute the statistics collected. This thesis is a continuation of the original MiddlePolice project to complete the design. We propose a framework and a methodology to perform inter-middlepolice coordination on a cloud scale. We demonstrate the effectiveness of the inter-middlepolice coordination mechanism through detailed implementation and thorough evaluation. Further, we show that the proposed improvements preserve all principles of original MiddlePolice design and offer a more complete yet equally effective solution to modern computer networks and security applications.","Submission published under a 24 month embargo labeled 'U of I Access', the embargo will last until 2021-05-01","The student, Yifei Li, accepted the attached license on 2019-04-18 at 17:17.","The student, Yifei Li, submitted this Thesis for approval on 2019-04-18 at 17:22.","This Thesis was approved for publication on 2019-04-19 at 16:09.","Made available in DSpace on 2019-08-23T20:36:03Z (GMT). No. of bitstreams: 2 LI-THESIS-2019.pdf: 1312170 bytes, checksum: cc07b2bfedd5610657df005818c02874 (MD5) LICENSE.txt: 4205 bytes, checksum: d71036ad5f3fa34bd6a4399072c232ed (MD5) Previous issue date: 2019-04-19","Embargo set by: Seth Robbins for item 112179 Lift date: 2021-08-23T20:36:18Z Reason: Author requested U of Illinois access only (OA after 2yrs) in Vireo ETD system","U of I Only Restriction Lifted for Item 112179 on 2021-08-24T09:15:38Z."],"dc:format":["application/pdf"],"dc:identifier":["http://hdl.handle.net/2142/105060"],"dc:language":["en"],"dc:rights":["Copyright 2019 Yifei Li"],"dc:subject":["DDoS Mitigation, Computer Network, Distributed System, Cloud Computing"],"dc:title":["Inter-middlepolice coordination framework and co-bottleneck detection"],"dc:type":["text"],"thesis:degree_discipline":["Electrical & Computer Engr"],"thesis:degree_level":["Thesis"],"thesis:degree_name":["M.S."],"thesis:institution_name":["University of Illinois at Urbana-Champaign"]},"updated_at":"2026-07-22T22:24:44Z"}