I proposed regulation as interim step in the past. Here's a reprint of it: A combo of per-customer authentication at packet-level, DDOS monitoring, and rate li

I proposed regulation as interim step in the past. Here's a reprint of it: A combo of per-customer authentication at packet-level, DDOS monitoring, and rate limiting (or termination) of specific connection upon DDOS or malicious activity. That by itself would stop a lot of these right at the Tier 3 ISP level. Trickle those suckers down to dialup speeds with a notice telling them their computer is being used in a crime with a link to helpful ways on dealing with it (or support number). Far as design, they could put cheap knockoff of an INFOSEC guard in their modems with CPU’s resistant to code injection. Include accelerators for networking functions and/or some DDOS detection (esp low-layer flooding) right at that device. https://en.wikipedia.org/wiki/Guard_(information_security) https://en.wikipedia.org/wiki/Guard_(information_security) Old one from high-assurance field, albeit with medium rating, that did what I’m describing in an Ethernet, card computer: https://web.archive.org/web/20040623100328/http://www.cryptek.com/SecureNetworks/products_diamtek_dia_link.php https://web.archive.org/web/20040623100328/http://www.crypte... Modern implementation could probably be done in a cheap clone and security-enhanced mod of this product: https://www.cavium.com/OCTEON-II_CN68XX.html https://www.cavium.com/OCTEON-II_CN68XX.html