New device looks to stop DoS attacks at the source
Source: InfoWorld
Looking to move the fight against DOS (denial of service) attacks away from attack targets and back to their source, Cs3 Wednesday announced the release of its Reverse Firewall network device.
The Reverse Firewall sits between the Internet and the network it's protecting and limits the flow of outbound information from the network in order to prevent systems from being used for DoS attacks, said Krishnamurthy Narayanaswamy, Cs3 co-founder and CTO.
The device is able to do this by using Cs3's "fair service scheduling" technology, which distributes available bandwidth equally across all outbound connections, rather than allowing just one connection to hog it all as an attack traffic would, he said. Fair service scheduling also puts a priority on two-way connections, that is, connections in which two computers are participating, rather than the one-way data flows that would characterize attack traffic, he said. The device can also help administrators identify both attacks and machines that may have been taken over for use in attacks by notifying administrators when large amounts of suspicious outbound traffic are being sent, he said.
