Network traffic tracking systems: Folly in the large?

Proceedings New Security Paradigm Workshop

Volumn , Issue , 2000, Pages 119-124

  Daniels, Thomas E ^a   Spafford, Eugene H ^a  

^a Ctr Educ/Res Info Assur/Secty   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK PROTOCOLS; ROUTERS; SECURITY OF DATA; TELECOMMUNICATION TRAFFIC;

NETWORK TRAFFIC TRACKING SYSTEMS (NTTS);

INTERNET;

EID: 0034593159     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (23)

1. S. M. Bellovin. Security Problems in the TCP-IP Protocol Suite. Computer Communications Review, 19(2):32-48, April 1989.
2. S. M. Bellovin. Icmp traceback messages: Internee draft, http://www.ietf.org/internet-drafts/draft-bellovin-itrace-00.txt, March 2000.
3. C. A. CA-96.21. TCP SYN Flooding and IP Spoofing Attacks. http://www.cert.org/advisories/CA-96.21.tcp_syn_flooding.html, September 1996.
4. C. A. CA-97.28. IP Denial-of-Service Attacks. http://www.cert.org/advisories/CA-97.28.Teardrop_Land.html, December 1997.
5. C. A. CA-98.01. 'Smurf' IP Denial-of-Service Attacks. http://www.cert.org/advisories/CA-98.01.smurf.html, January 1998.
6. C. A. CA-98.13. Vulnerability in Certain TCP/IP Implementations. http://www.cert.org/advisories/CA-98-13-tcp-denial-of-service.html, December 1998.
7. H. Chang and D.Drew. DoSTracker. This was a publically available PERL script that attempted to trace a denial-of-service attack through a series of Cisco routers. It was released into the public domain, but later withdrawn. Copies are still available on some websites, June 1997.
8. T. E. Daniels, B. Kuperman, and C. Shields. Packet tracker technical report 1. Technical report, Center for Education and Research in Information Assurance and Security (CERIAS), Purdue University, 1999.
9. D. Dittrich. The "tribe flood network" distributed denial of service attack tool. http://packetstorm.securify.com/distributed/tfn.analysis.txt, October 1999.
10. J. Glasner. Feds ok cell phone tracking. Wired News, September 1999.
11. C. I. N. IN-99-07. Distributed denial of service tools. http://www.cert.org/incident_notes/IN-99-07.html November 1999.
12. M. S. Johns. Rfc 1413: Identification protocol. http://docs.unode.net/rfc/html/rfc1413.html, February 1993.
13. H. T. Jung, H. L. Kim, Y. M. Seo, G. Choe, S. L. Min, C. S. Kim, and K. Koh. Caller id system in the internee environment. In UNIX Security Symposium IV Proceedings, pages 69-78, 1993.
14. S. Kent and R. Atkinson. Ip authentication header. Request for Comments 2402, November 1998.
15. G. Mansfield, K. Ohta, Y. Takei, N. Kato, and Y. Nemoto. Towards Trapping Wily Intruders in the Large. In Proceedings of the Second Annual Workshop in Recent Advances in Intrusion Detection(RAID), West Lafayette, IN, September 1999.
16. R. Morris. A Weakness in the 4.2BSD Unix TCP-IP Software. Technical Report 17, AT&T Bell Laboratories, 1985. Computing Science Technical Report.
17. M. G. Reed, P. F. Syverson, and D. M. Goldschlag. Proxies for anonymous routing. In 12th Annual Computer Security Applications Conference, pages 95-194. IEEE, December 1995.
18. M. K. Reiter and A. D. Rubin. Crowds: Anonymity for web transactions. Technical Report 97-15, DIMACS, April 1997.
19. J. Rowe. Intrusion detection and isolation protocol: Automated response to attacks. Presentation at RAID'99, Sep 1999.
20. S. Staniford-Chen and L. Heberlein. Holding Intruders Accountable on the Internee. In Proc. of the 1995 IEEE Symposium on Security and Privacy, pages 39-49, Oakland, CA, May 1995.
21. S. G. Staniford-Chen. Distributed tracing of intruders. Master's thesis, University of California, Davis, 1995.
22. A. S. Tanenbaum. Computer Networks. Prentice Hall, Inc., 2 edition, 1988.
23. Y. Zhang and V. Paxson. Stepping Stone Detection. Presentation at SIGCOMM'99, New Areas of Research, August 1999.