In a bid to fight the growing menace from computer and router-based denial of service (DoS) attacks, security firm have developed a technique to dam the DoS data flood at source. Using funding from the Defence Advanced Research Projects Agency (DARPA), security technology firm Cs3 is looking a the concept of reverse firewalling, or keeping the flood of data from a DoS attack dammed up at the source.
The Reverse Firewall works by filtering the outgoing packets from a network. The difference between a legitimate application that uses high bandwidth and a packet flooding attack is that, in the former case, the machine at the other end of the conversation is participating in a two-way conversation. In the case of a DoS attack, the exchange is one sided.
News: Firewalls
