Towards a More Functional and Secure Network Infrastructure

Abstract We propose an overlay network infrastructure that provides better protection against DoS attacks as well as more functionality than today’s Internet. Our solution is based on three simple principles: (i) enabling end-hosts to communicate without revealing their IP address, (ii) giving end-hosts control to defend against Denial-of-Service (DoS) attacks at the overlay level, and (iii) making sure that the added functionality does not introduce vulnerabilities not present in the Internet. Our design is based on the Internet Indirection Infrastructure ( ).