Denial of Service Countermeasures Appliance (DOSCA) for Computer Network Operations (CNO)

Denial of Service (DoS) attacks are particularly problematic for three reasons. First, they can bring down entire networks, not just isolated components. Second, when DoS attacks occur, network and network security manager situational awareness is lost. Third, to completely stop this type of attack, the source of the attack must be shut off. ISAC plans to develop a Denial of Service Attack Countermeasures Appliance (DOSCA) that addresses all three problems. DOSCA will combine active flow control, strategic containment, out of band cyber warning, and computational fluid dynamics modeling techniques to maintain community wide situational awareness and initiate the appropriate response at the ISP or attacker location to eliminate DoS attacks at their source. Additionally, DOSCA will be designed to operate within the strict operational constraints imposed on sensor to shooter weapons systems. The sensor to shooter environment is characterized by the need for low or no additional induced system latency, high system reliability, and the requirement to maintain continuity of operations in the presence of information warfare attacks and/or systems failure.