The Cooperative Intrusion Traceback and Response Architecture (CITRA) [1] and the Intruder Detection and Isolation Protocol (IDIP) [2] provide an infrastructure that enables intrusion detection systems, firewalls, routers, and other components to cooperatively
trace and block network intrusions as close to their sources as possible. We present the results of recent testbed experiments
using CITRA and IDIPto defend streaming multimedia sessions against the Stacheldraht DDoS toolkit. Experimental data suggests
that these technologies represent a promising approach for autonomic DDoS defense.
This research was supported by DARPA/Rome Laboratory Contracts F30602-98-C- 0012, F30602-99-C-0181, and F30602-97-C-0309.
Distribution Statement “A“, Approved for Public Release - Distribution Unlimited.