Taming IP packet flooding attacks

this paper is that hosts -- not the network -- should be given control to respond to packet floods and overload. Ideally, hosts should have fine-grained control over how routers process the packets addressed to them. For instance, hosts should be able to decide which packets to receive, which packets are dropped, and which packets are redirected. To illustrate this point, we show how hosts can implement the following useful defenses against packet flooding: Avoid receiving packets at arbitrary ports