Countering DDoS Attacks with Multi-Path Overlay Networks

has emerged as a major threat to the operation of online network services [1, 2, 3]. Current forms of DDoS attacks implicate multiple groups of Internet machines that have been taken over and controlled by an attacker. These machines, called bots, are manipulated by the attacker to produce an excessive surge of traffi c toward a target server, the victim. The target server is forced to processing and/or to link-capacity starvation, since malicious traffi c is blended with normal traffi c, making it diffi cult t