Firewalls

385

I

Thwarting Counterfeiters and Forgers

to Retain Integrity Through a Reverse

Firewall

Firewalls protect networks from incoming packets. In contrast, the

reverse firewall protects the outside network from packet flooding

distributed denial-of-service (DDoS) attacks that originate on the

inside. The reverse firewall drastically reduces the impact of DDoS

attacks mounted from inside the network. DDoS attacks are usually

conducted through “zombies” (i.e., computers that have come under

the control of the attacker). The reverse firewall chokes off packet

flooding attacks before they exit the network where they originate. This

appendix describes the reverse ...