An analysis of using reflectors for distributed denial-of-service attacks

Computer Communication Review

Volumn 31, Issue 3, 2001, Pages 38-47

  Paxson, Vern ^a  

^a INTERNATIONAL COMPUTER SCIENCE INSTITUTE   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 0003375670     PISSN: 01464833     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/505659.505664     Document Type: Article

References (27)

1. C. Barros, "[LONG] A Proposal for ICMP Traceback Messages," http://www.research.att.com/lists/ ietf-itrace/2000/09/msg00044.html, Sept. 18, 2000.
2. S. Bellovin, "Defending Against Sequence Number Attacks," RFC 1948, May 1996.
3. S. Bellovin, "ICMP Traceback Messages," Internet Draft, http://www.research.att.com/~smb/ papers/draft-bellovin-itrace-00.txt, March 2000.
4. S. Bellovin, "Security Aspects of Napster and Gnutella," http://www.research.att.com/~smb/talks/ NapsterGnutella/index.htm, June 2000.
5. R. Braden, "T/TCP - TCP Extensions for Transactions: Functional Specification," RFC 1644, July 1994.
6. J. Case, M. Fedor, M. Schoffstall and C. Davin, "Simple Network Management Protocol (SNMP)," RFC 1157, May 1990.
7. CERT Coordination Center, "FTP Bounce," CERT Advisory CA-1997-27, http://www.cert.org/ advisories/CA-1997-27.html,December 1997.
8. D. Farinacci, T. Li, S. Hanks, D. Meyer and P. Traina, "Generic Routing Encapsulation (GRE), RFC 2784, March 2000.
9. P. Ferguson and D. Senie, "Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing," RFC 2827, May 2000.
10. Gnutella, http://gnutella.wego.com, 2000.
11. Guardent, "Guardent releases information regarding flaw in Internet infrastructure," http://www.guard ent.com/pr2001-03-12-ips.html, March 2001.
12. P. Metzger, private communication, February 2000.
13. P. Mockapetris, "Domain names - implementation and specification," RFC 1035, November 1987.
14. J. Mogul and S. Deering, "Path MTU discovery," RFC 1191, November 1990.
15. K. Nichols, S. Blake, F. Baker and D. Black, "Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6 Headers," RFC 2474, December 1998.
16. V. Paxson, "Bro: A System for Detecting Network Intruders in Real-Time," Computer Networks 31(23-24), pp. 2435-2463, December 1999.
17. J. Postel, "User Datagram Protocol," RFC 768, August 1980.
18. J. Postel, "Internet Protocol," RFC 791, September 1981.
19. J. Postel, "Internet Control Message Protocol," RFC 792, September 1981.
20. J. Postel, "Transmission Control Protocol," RFC 793, September 1981.
21. J. Postel, "Simple Mail Transfer Protocol," RFC 821, August 1982.
22. J. Postel and J. Reynolds, "File Transfer Protocol," RFC 959, October 1985.
23. J. Reynolds and J. Postel, "Assigned Numbers," RFC 1700, October 1994.
24. S. Savage, N. Cardwell, D. Wetherall and T. Anderson, "TCP Congestion Control with a Misbehaving Receiver," Computer Communication Review, 29(5), pp. 71-78, October 1999.
25. S. Savage, D. Wetherall, A. Karlin and T. Anderson, "Practical Network Support for IP Traceback," Proc. ACM/SIGCOMM, pp. 295-306, August 2000.
26. A. Snoeren, C. Partridge, L. Sanchez, W. Strayer, C. Jones and F. Tchakountio, "Hash-Based IP Traceback," Proc. ACM/SIGCOMM, to appear, August 2001.
27. D. Song and A. Perrig, "Advanced and Authenticated Marking Schemes for IP Traceback," Proc. IEEE INFOCOM, April 2001.