Modeling Denial-of-Service Attacks Protection Controller Using Network Calculus

"Denial of Service" attack is a severe problem that must be solved by maintaining the availability properties in the digital networked system. In particular, this may be due to various types of flow restriction systems (Shapers or Policy enforcement devices). Limiting the input stream allows to ensure stable network operation without long delays and overloading the processing data components. The device or controller limits the amount of data passed through, and in such a way, it protects the system from flood attacks, expected to overflow the network channel. However, such systems must have the relevant characteristics, including the extreme conditions during attacks on the system. The proposed model makes it possible to calculate the characteristics of a controller that maintains the limitation of the input flow within the given limits. The Network Calculus method is the basis of this model.